feat(business): Salesforce + DocuSign + Notion on the shared foundation

Wave 2 batch 1:
- @hanzo/salesforce — LWC assistant + Apex callouts on record pages, read record →
  AI → write-back (Task/Note/Chatter), Named+External Credential (key never in Apex).
- @hanzo/docusign — summarize/extract-terms/risk-flag agreements + Connect webhook
  (HMAC-verified) auto-summary; envelope docs → pdf.js → @hanzo/ai (103 tests).
- @hanzo/notion — summarize/draft/extract pages → databases, append AI blocks,
  server-held OAuth token + proxy (104 tests).

CI: add notion/docusign/salesforce test steps. All on @hanzo/ai (now published
0.2.0 as the canonical headless client) + @hanzo/iam.

.github/workflows/ci.yml

@@ -53,6 +53,15 @@ jobs:
     - name: Test Clio integration
       run: pnpm --filter @hanzo/clio test
 
+    - name: Test Notion integration
+      run: pnpm --filter @hanzo/notion test
+
+    - name: Test DocuSign integration
+      run: pnpm --filter @hanzo/docusign test
+
+    - name: Test Salesforce (pure helpers)
+      run: pnpm --filter @hanzo/salesforce test
+
     - name: Test cards (shared card-builder)
       run: pnpm --filter @hanzo/cards test