Preview the full document before signing

Signers and operators can now open the entire unsigned document before putting their name to it — available on both the remote signing link and the in-person signing wizard. The preview is strictly view-only: opening it creates no audit event, no state change, and no database write.