feat(form-builder): retry history table + integration (WS-6)

Per-attempt retry history (timestamp, user, outcome, exception detail
if failed) replaces the counter-only retry_count tracking.

Changes:

- New `form_submission_action_failure_retry_attempts` table (cascade on
  parent delete, nullOnDelete on user). Explicit short FK names
  (`fsafra_failure_fk`, `fsafra_user_fk`) — auto-generated names exceed
  MySQL's 64-char identifier limit.
- New FormSubmissionActionFailureRetryAttempt model + factory +
  succeeded() state.
- Parent FormSubmissionActionFailure gets retryAttempts() HasMany
  relation (latest('attempted_at')).
- New FormFailureRetryService centralises the retry-flow logic. Both
  the API controller and the artisan command delegate to it. Service
  writes a retry_attempt record per attempt; parent's retry_count
  stays as denormalised cache for index-view performance.
- Successful retry: attempt(succeeded) + parent.retry_count++ +
  parent.resolved_at + parent.resolved_by_user_id + parent.resolved_note
  ("Geslaagde retry door {actor.name}" or "Geslaagde retry
  (geautomatiseerd)" for command-line invocation without an actor).
- Failed retry: attempt(failed) with NEW exception details +
  parent.retry_count++. Parent's exception_class/_message stay
  audit-immutable — they represent the FIRST failure.
- canBeRetried() now correctly checks both resolved_at AND
  dismissed_at (sessie 2's open question Q2 closure).
- New FailureNotRetriableException (controller → 422) and
  ParentSubmissionGoneException (controller → 410) for cleaner
  flow control.

12 new tests:
- FormSubmissionActionFailureRetryAttemptTest (5 unit tests)
- RetryFlowProducesRetryAttemptsTest (7 integration tests covering
  succeeded path, failed path, resolved/dismissed blocking,
  multiple-retries chronological ordering, canBeRetried truth tables)

Pre-existing tests touched:
- FormSubmissionActionFailureTest::test_can_be_retried_only_for_open_state
  — updated to reflect Q2 closure (resolved now blocks too).
- Ws6FoundationMigrationTest::test_down_methods_clean_up_columns_and_table
  — child table must drop before parent (FK constraint).
- 5 backfill test step-counts bumped +1 (new migration sits at top).

SCHEMA.md → v2.9. Schema dump regenerated.

Refs: RFC-WS-6.md §3 Q5 addendum, sessie 2 Q2

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

api/app/Http/Controllers/Api/V1/FormBuilder/FormSubmissionActionFailureController.php

@@ -4,22 +4,21 @@ declare(strict_types=1);
 
 namespace App\Http\Controllers\Api\V1\FormBuilder;
 
-use App\Enums\FormBuilder\ApplyStatus;
 use App\Enums\FormBuilder\DismissalReasonType;
-use App\FormBuilder\Bindings\FormBindingApplicator;
+use App\Exceptions\FormBuilder\FailureNotRetriableException;
+use App\Exceptions\FormBuilder\ParentSubmissionGoneException;
 use App\Http\Controllers\Controller;
 use App\Http\Requests\FormBuilder\DismissFailureRequest;
 use App\Http\Requests\FormBuilder\ResolveFailureRequest;
 use App\Http\Resources\FormBuilder\FormSubmissionActionFailureResource;
-use App\Models\FormBuilder\FormSubmission;
 use App\Models\FormBuilder\FormSubmissionActionFailure;
 use App\Models\Organisation;
+use App\Services\FormBuilder\FormFailureRetryService;
 use Illuminate\Database\Eloquent\ModelNotFoundException;
 use Illuminate\Http\JsonResponse;
+use Illuminate\Http\Request;
 use Illuminate\Http\Resources\Json\AnonymousResourceCollection;
-use Illuminate\Support\Facades\DB;
 use Illuminate\Support\Facades\Gate;
-use Throwable;
 
 /**
  * RFC-WS-6 §3 (Q5) + §4 (V3) — admin endpoints for the binding-pipeline
@@ -41,7 +40,7 @@ final class FormSubmissionActionFailureController extends Controller
 
         $failures = FormSubmissionActionFailure::query()
             ->whereHas('submission', function ($q) use ($organisation): void {
-                /** @var \Illuminate\Database\Eloquent\Builder<FormSubmission> $q */
+                /** @var \Illuminate\Database\Eloquent\Builder<\App\Models\FormBuilder\FormSubmission> $q */
                 $q->where('organisation_id', $organisation->id);
             })
             ->latest('failed_at')
@@ -74,59 +73,30 @@ final class FormSubmissionActionFailureController extends Controller
         return new FormSubmissionActionFailureResource($formSubmissionActionFailure);
     }
 
-    public function retry(?Organisation $organisation, FormSubmissionActionFailure $formSubmissionActionFailure, FormBindingApplicator $applicator): FormSubmissionActionFailureResource|JsonResponse
-    {
+    public function retry(
+        ?Organisation $organisation,
+        FormSubmissionActionFailure $formSubmissionActionFailure,
+        Request $request,
+        FormFailureRetryService $retryService,
+    ): FormSubmissionActionFailureResource|JsonResponse {
         unset($organisation);
         $failure = $formSubmissionActionFailure;
         $this->authorizeOrNotFound('retry', $failure);
 
-        if (! $failure->canBeRetried()) {
+        try {
+            $retryService->retry($failure, $request->user());
+        } catch (FailureNotRetriableException $e) {
             return response()->json([
                 'error' => 'cannot_retry',
-                'message' => 'Failure is dismissed; cannot retry.',
+                'message' => $e->getMessage(),
             ], 422);
-        }
-
-        $submission = $failure->submission;
-        if ($submission === null) {
+        } catch (ParentSubmissionGoneException $e) {
             return response()->json([
                 'error' => 'submission_gone',
-                'message' => 'Parent submission has been deleted.',
+                'message' => $e->getMessage(),
             ], 410);
         }
 
-        try {
-            DB::transaction(function () use ($applicator, $submission): void {
-                $result = $applicator->apply($submission);
-                FormSubmission::query()
-                    ->whereKey($submission->id)
-                    ->update([
-                        'apply_status' => $result->applyStatus()->value,
-                        'apply_completed_at' => now(),
-                    ]);
-            });
-            $failure->retry_count = (int) $failure->retry_count + 1;
-            $failure->resolved_at = now();
-            $failure->save();
-        } catch (Throwable $e) {
-            DB::transaction(function () use ($failure, $submission, $e): void {
-                FormSubmissionActionFailure::query()->create([
-                    'form_submission_id' => $submission->id,
-                    'listener_class' => $failure->listener_class,
-                    'failed_at' => now(),
-                    'exception_class' => $e::class,
-                    'exception_message' => $e->getMessage(),
-                    'context' => ['retry_of' => (string) $failure->id],
-                ]);
-                FormSubmissionActionFailure::query()
-                    ->whereKey($failure->id)
-                    ->update(['retry_count' => (int) $failure->retry_count + 1]);
-                FormSubmission::query()
-                    ->whereKey($submission->id)
-                    ->update(['apply_status' => ApplyStatus::FAILED->value]);
-            });
-        }
-
         return new FormSubmissionActionFailureResource($failure->refresh());
     }