Add shared Product/Service list/get/create clients and Service CAS update. Product direct update and both deletes remain absent; proposal clients are preserved.
Add sanitized Stash PDF metadata list/get clients and remove stale mutation client artifacts. Release remains gated on DB tenancy, exact read scope, canonical tenant config, and no-write smoke.