Issue #3594410: Degrade pdv_webform gracefully when the vault is unusable

Frank Mablyrequested to merge
issue/pdv-3594410:3594410-pdvwebform-degrade-gracefully into 1.x

Fixes #3594410.

When the vault cannot be used for the current user, PdvRecordMap no longer shows controls that would fail:

  • Anonymous submitter: the #pdv_record_store save-consent checkboxes are hidden (handler) and the pdv_file save-to-vault box self-hides (element, mirroring its vault picker). The form still works as a plain webform.
  • Vault unreachable (the kind-access client call throws): a clear 'temporarily unavailable' message replaces the dead-end grant link, and every save control is hidden.
  • Vault passphrase-locked: the unlock prompt stays, and the save controls are hidden too (a write cannot work while locked).

Left intentionally unchanged (per the issue): declining read while still saving is legitimate (orthogonal scopes), and the read grant is still offered for kinds the user owns no item of yet (keys on access, not presence).

French translation added. Kernel coverage: anonymous + locked hide the save consent (verified to fail without the fix). Full pdv_webform suite green; phpcs + phpstan clean.

Merge request reports