Create pre-auth records from invoices with supplier context

Invoices arrive without validated supplier context, making AP reconcile and delay approvals. Pre-authorizations are created and linked so payments are ready before the next billing run.