Record an applicative signature for a required document and return remaining pending count.
- User can sign only documents that are currently required for role/locale context.
- Signature persistence is idempotent (
user_id,document_idunique). - Returns updated
pendingCountafter signature write.