Critical path review

Phase 3: gate Autofill / eSign on deal + mapping critical paths, and queue unmapped boxes that look critical with proposed catalog bindings. Applying a proposal only sets catalogFieldId / dataKey — it never moves PDF geometry.