Update applicant record from labeled signature emails

Signed attendance emails sit in Gmail unlinked to applicant records, delaying onboarding and payroll for recruiters. Capture the signed file, log an audit row, and mark records signed same day.