fix(security): disable email-voting + ORI email leak + @self.id exposure (C2/C5/L1)

[rubenvdlinde]

Summary

• C2 (email-voting disabled) Remove MailReplyHandler from background-jobs in info.xml and stop scheduling it in Application::boot(). Email-voting is disabled until the feature is audited. Removes unused IJobList import.
• C5 (ORI email leak) serializeOri() was including the email field for all resource types (meetings, motions, bodies). Email is now restricted to Organization-typed resources only.
• L1 (@self.id public exposure) Fix id resolution in serializeOri() to use the entity's own uuid field first; @self.id is an internal OR reference and must not be surfaced via the public ORI API.
• Pre-existing PHPStan: Fix Application.php DI registrations that were missing participantResolver (MinutesController/VotingService/LiveMeetingController), groupManager (TaskController/CommentController/MotionCoauthorController), container+groupManager (EngagementController), and had spurious groupManager on AnalyticsController.

Test plan

• PHPCS: clean (0 errors)
• PHPStan: clean (0 errors)
• MailReplyHandler no longer appears in scheduled jobs after app enable
• ORI /api/ori/{schema}/{id} for a governance-body does not expose email
• ORI /api/ori/{schema}/{id} for an organization-schema resource DOES expose email
• All controllers/services resolve correctly from the DI container