fix: only notify signers with ABLE_TO_SIGN status in sequential flow

In ordered_numeric signature flow, all signers were receiving
notifications regardless of their status. This caused signers
with signing_order > 1 (status DRAFT) to be notified immediately.

Changes:
- Update SignRequest status on PATCH operations, not just INSERT
- Only notify signers when status is ABLE_TO_SIGN
- Ensure signers with order > 1 remain in DRAFT status until
  previous orders are completed

This ensures notifications are sent only to signers who can
actually sign at that moment.

Signed-off-by: Vitor Mattos <[email protected]>

Author: vitormattos

lib/Service/RequestSignatureService.php

@@ -264,15 +264,21 @@ private function associateToSigner(
 
 		$signRequest->setSigningOrder($signingOrder);
 
-		if (!$signRequest->getId()) {
+		$isNewSignRequest = !$signRequest->getId();
+		$currentStatus = $signRequest->getStatusEnum();
+
+		if ($isNewSignRequest || $currentStatus === \OCA\Libresign\Db\SignRequestStatus::DRAFT) {
 			$initialStatus = $this->determineInitialStatus($signingOrder);
 			$signRequest->setStatusEnum($initialStatus);
 		}
 
 		$this->saveSignRequest($signRequest);
+
+		$shouldNotify = $notify && $signRequest->getStatusEnum() === \OCA\Libresign\Db\SignRequestStatus::ABLE_TO_SIGN;
+
 		foreach ($identifyMethodsIncances as $identifyMethod) {
 			$identifyMethod->getEntity()->setSignRequestId($signRequest->getId());
-			$identifyMethod->willNotifyUser($notify);
+			$identifyMethod->willNotifyUser($shouldNotify);
 			$identifyMethod->save();
 		}
 		return $signRequest;