feat(tenant): supersede unknown publish tasks on manual retry

Replace the in-place requeue of submit-uncertain unknown publish tasks
with an explicit supersede-and-create-new flow: manual retries mark the
old unknown task failed (manual_retry_superseded) and create a fresh task
carrying manual_retry / superseded_unknown_task_ids in its payload.

Also fold title-length validation into definitivePublishFailurePattern and
check the pattern before the publish_submit_uncertain guard so those
failures are released from the dedup set.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

server/internal/tenant/transport/publish_job_handler.go

@@ -25,6 +25,7 @@ func (h *PublishJobHandler) Create(c *gin.Context) {
 		response.Error(c, response.ErrBadRequest(40001, "invalid_params", err.Error()))
 		return
 	}
+	req.AllowSupersedeUnknown = true
 
 	data, err := h.svc.Create(c.Request.Context(), auth.MustActor(c.Request.Context()), req)
 	if err != nil {