feat: PolicyInsight pattern extraction (hardened)

[ChimdumebiNebolisa]

Summary

• Adds typed analysis stages, evidence ID-first highlighting, and hardened model-only retry (POST /api/analyze/retry-model) with server-side payload validation and evidence rebuild.
• Adds analysis mode banner, full report Markdown export, and expanded unit/integration coverage (135 tests; >=95% on critical modules).
• Tracks docs/POLICYINSIGHT_EXTRACTION_AUDIT.md normally; dedupes analysis mode labels and report copy (shared download button, removed dead public-copy constants, reduced Texas section repetition).

Test plan

• npm test (135/135)
• npm run test:coverage (98.09% statements; thresholds pass)
• npm run typecheck
• npm run lint (3 pre-existing warnings)
• npm run verify:legal
• npm run evaluate
• npm run build
• Manual dev smoke: sample lease -> report, mode banner, both Markdown downloads, no developer debug panel
• PDF upload / paste text / Gemini-unavailable retry (not run in this pass)

Remaining risks

• Content integrity key (documentId) is a stale-state check only, not authentication.
• Playwright e2e not run in CI for this PR.

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated (UTC)
before-you-sign	Ready	Preview, Comment	Jul 11, 2026 10:28pm