Add correct, void, resend, revoke, and reassign controls for sent documents

[jusso-dev]

Context

Once a document is sent, teams need safe operational controls. DocuSign-style tools allow senders to correct recipient details, void/cancel active envelopes, resend links, and manage recipient access without losing the audit trail.

Goal

Add document management controls for active sent documents: correct, void, resend, revoke, and reassign.

Scope

• Correct recipient name/email before completion.
• Reassign a recipient to a new email/name while preserving historical audit context.
• Void/cancel an active document/envelope.
• Revoke all outstanding recipient tokens when voided.
• Resend link to a single recipient.
• Expire/regenerate a recipient token.
• Prevent corrections on locked/completed documents unless explicitly allowed by a future amendment flow.

UX Notes

• Add an "Manage recipients" area on the document detail page.
• Actions should be per-recipient where possible.
• Destructive operations require confirmation.
• Sender should see clear warnings about audit implications.
• Voided documents should have a visible status and no active acceptance actions.

Data/Architecture Notes

Potential fields/events:

• Document.status = cancelled may already exist conceptually and should be reused if possible.
• Recipient status may need revoked, reassigned, or voided treatment.
• Audit events:
  • document.voided
  • document.corrected
  • document.recipient_reassigned
  • document.recipient_link_revoked
  • document.recipient_link_resent

Acceptance Criteria

• Sender can correct recipient name/email on an active sent document.
• Sender can reassign a recipient and the old link stops working.
• Sender can void/cancel a document and all active tokens stop working.
• Sender can resend a link to one recipient.
• All actions are audit logged with previous/new values where appropriate.
• Client portal shows a clear revoked/voided message for invalidated links.
• Completed/locked documents cannot be mutated through these controls.

Dependencies

• Recipient routing issue affects which recipients can be resent or reassigned.
• Completion certificate issue should include correction/void/reassign events.

Priority

P0/P1. Essential for real-world send mistakes and document control.