feat(serenity): expose semrush provisioning status on brand reads (LLMO-7352/LLMO-7418)

[IrisAlexandrescu]

Summary

Fifth PR in the LLMO-7352/LLMO-7418 stack (after #3223, #3233, #3246, #3249). Small, focused prerequisite for the frontend UI-states work (LLMO-7419): surfaces brands.semrush_provisioning_status/semrush_provisioning_error as read-only semrushProvisioningStatus/semrushProvisioningError fields on the V2 Brand DTO.

Why this PR exists: these two columns previously existed only for the async provisioning worker's own internal CAS bookkeeping (getBrandProvisioningState's narrow PROVISIONING_SELECT) — no GET response exposed them. The frontend has no way to show a persistent "Setting up / Ready / Setup failed" indicator on the brand list or detail view without this — it would otherwise have to rely on the one-shot jobId an async: true create/activate response carries, which is useless on any later page load.

Changes

• mapDbBrandToV2 (src/support/brands-storage.js) — the single mapping point for all 3 GET paths (listBrandsForOrg/getBrandForOrg/getBrandForOrgSite) and the create/update write-response paths (all route through withSerenityState, which just spreads whatever the mapper produced) — now copies the two columns onto the DTO. No SELECT/query changes needed: PostgREST's '*' already returns every brands column.
• docs/openapi/schemas.yaml's V2Brand schema — both fields added as readOnly, nullable, not in required.

Test plan

• npm run lint, npm run type-check, npm run docs:lint — all clean
• New unit test in brands-storage.test.js asserting the mapping (both the failed-with-error case and the null/never-provisioned case)
• Full targeted regression suite (brands, serenity, serenity-prompt-classification, routes) — 4513 passing, 0 regressions

🤖 Generated with Claude Code

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.

📢 Thoughts on this report? Let us know!

[IrisAlexandrescu]

Rebased onto Phase 4's (#3249) fix commit — no changes needed in this PR itself, the fixed activate-brand-workspace-job.js behavior now carries through automatically.

[github-actions]

This PR will trigger a minor release when merged.