Run Middesk, Socure, and GIACT checks on the Review step
pending initially (async) — poll /verification after.
"summary.action_required": "socure_refer" — call POST /socure-refer to get the DocV link/QR code for ID scanning, then keep polling /verification until the webhook completes it.