[codex] Install SuperDoc from template-builder and eSign

[caio-pizzol]

Summary

• Add superdoc as a runtime dependency for @superdoc-dev/template-builder and @superdoc-dev/esign while keeping it as a peer dependency.
• Raise both wrapper peer floors to ^1.33.1 so updating the wrappers moves customers onto the current stable SuperDoc line.
• Keep SuperDoc externalized in the wrapper builds and update release-impact docs/comments to describe the dep+peer contract.
• Align eSign's PDF module config type with SuperDoc's current module config shape (Record<string, unknown> passthrough plus pdfLib: object).

Base Branch

This PR targets stable intentionally as a customer-facing hotfix path. The repo has used direct-to-stable PRs for release fixes and wrapper peer-floor bumps before, and merging this into stable lets the existing template-builder and eSign release workflows publish latest immediately.

main still needs the separate stable -> main recovery work so release ancestry and package manifests catch up. Until that is fixed, routing this through main would delay the customer unblock and add another dependency on the broken sync path.

Impact

This is a manifest/install behavior change, not a bundling change. Consumers below SuperDoc 1.33.1 will need to move to the current stable line when they take these wrapper releases.

We do not need to bump these floors on every SuperDoc release. The floor only needs to move when we intentionally want a wrapper release to force consumers onto a newer minimum SuperDoc version.

Validation

• CI=1 pnpm install --frozen-lockfile --lockfile-only
• CI=1 pnpm install --frozen-lockfile
• pnpm run build:superdoc
• pnpm --filter @superdoc-dev/template-builder --filter @superdoc-dev/esign lint
• pnpm --filter @superdoc-dev/template-builder --filter @superdoc-dev/esign type-check
• pnpm --filter @superdoc-dev/template-builder --filter @superdoc-dev/esign build
• pnpm --filter @superdoc-dev/template-builder --filter @superdoc-dev/esign test