Issue #3608384: Narrow the submodule engine type hints to the role contract interfaces

Follow-up to #3608380. Every consumer that type-hinted the full WorkflowEngineInterface now declares only the role it uses: 21 consumers across the root module and the submodules (orchestra_api, orchestra_action, orchestra_content, orchestra_eca, orchestra_inbox, orchestra_interaction, orchestra_interaction_webform, orchestra_vbo, the audiences, timeout actions, subscribers and hooks) narrow to ProcessControlInterface; the two orchestra_ui classes that genuinely mix roles (the controller and the incident resume form) rightly keep the aggregate, as does the modeler (constants only).

The sweep exposed one real gap, fixed here: autowired hook classes (e.g. Hook\ProcessTokens) resolve constructor hints by interface name, so the three role interfaces gained container aliases to orchestra.engine alongside the existing aggregate alias.

No behavior change. Verified locally: root kernel plus unit (196), the kernel suites of every touched submodule (202), all Functional in Docker (37), phpcs, cspell.