fix(infra): deploy BPMN + DMN as one .bar so the inline decision resolves (S-13, refs #14)

The DMN service task resolves its decision scoped to the process's own deployment,
so a standalone .dmn deployment was invisible (FlowableObjectNotFoundException: No
decision found for key: diploma-eligibility). Bundle registratie.bpmn +
diploma-eligibility.dmn into a single registratie.bar and deploy it as one
deployment, giving the decision the process's parent deployment id. flowable-rest
does not expose the dmn-api app, so co-deployment is the way in.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

infra/seed-config.sh

@@ -35,12 +35,26 @@ populate() {  # volume  source(file or dir/.)
 
 [ "$#" -gt 0 ] || { echo "usage: seed-config.sh <oz|nrc|kc|fl> ..." >&2; exit 2; }
 
+# The registratie process and its diploma-eligibility DMN must land in ONE Flowable deployment, so the
+# process's inline DMN service task resolves the decision by its (shared) parent deployment id (S-13,
+# ADR-0016). We bundle both into a single .bar (zip) and deploy that one artefact.
+build_flowable_bar() {
+  local out="$1"
+  python3 - "$here/../workflows/registratie.bpmn" "$here/../workflows/diploma-eligibility.dmn" "$out" <<'PY'
+import sys, zipfile
+bpmn, dmn, out = sys.argv[1:4]
+with zipfile.ZipFile(out, "w", zipfile.ZIP_DEFLATED) as z:
+    z.write(bpmn, "registratie.bpmn")
+    z.write(dmn, "diploma-eligibility.dmn")
+PY
+}
+
 for key in "$@"; do
   case "$key" in
     oz) populate rr-oz-config "$here/openzaak/setup_configuration/." ;;
     nrc) populate rr-nrc-config "$here/opennotificaties/setup_configuration/." ;;
     kc) populate rr-kc-realms "$here/keycloak/realms/." ;;
-    fl) populate rr-fl-bpmn  "$here/../workflows/." ;;  # registratie.bpmn + diploma-eligibility.dmn
+    fl) bar="$(mktemp -d)/registratie.bar"; build_flowable_bar "$bar"; populate rr-fl-bpmn "$bar" ;;
     *)  echo "unknown seed key: $key" >&2; exit 2 ;;
   esac
 done