feat(storage): X14 Phase 2c — route remaining sync write-sites through storage.py

Completes the write-side rewiring (INV-STG1) for the call-sites that run in
synchronous contexts, via a new blocking facade in storage.py
(put_bytes_sync / put_file_sync — asyncio.run, or a worker thread when a loop
is already running):
- services/extractor.py: multimodal thumbnail JPEGs → DERIVED (rendered in a
  to_thread worker)
- services/docx_reviser.py: track-changes save (_save_docx_xml) + empty-diff
  copy (copy_with_revisions) → DOCUMENTS
- services/docx_retrofit.py: in-place retrofit backup → DOCUMENTS

Each site keeps a fallback to a direct disk write when the target path is
outside DATA_DIR (caller-provided). Under the default STORAGE_BACKEND=
filesystem the bytes land exactly where they did before — zero behaviour
change.

Also: mcp_env_catalog MINIO_ENDPOINT default updated to the durable
container-name endpoint (http://minio-bx2ykvw94xbutsex41hz4vv8:9000), matching
the Coolify "Connect to Predefined Network" change made for network durability.

All binary write-sites now flow through storage.py. git-tracked text
(case.json/notes/research-md/draft-md) stays on disk by design (INV-STG7);
court-fetch temp files are ephemeral.

tests: +2 (thumbnail renderer routes through storage; put_bytes_sync
round-trip); 55 storage/docx/track-changes green; 244 collected, no import
breakage.

Keeps G2; completes INV-STG1 write coverage. Spec: docs/spec/X14-storage-minio.md.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

web/mcp_env_catalog.py

@@ -99,8 +99,9 @@ ENV_CATALOG: dict[str, EnvSpec] = {
     ),
     "MINIO_ENDPOINT": EnvSpec(
         "MINIO_ENDPOINT", "storage", "string",
-        "endpoint פנימי של MinIO (server-side, רשת Docker)",
-        is_secret=False, is_editable=False, default="http://minio:9000",
+        "endpoint פנימי של MinIO (server-side, רשת Docker coolify — שם-קונטיינר עמיד)",
+        is_secret=False, is_editable=False,
+        default="http://minio-bx2ykvw94xbutsex41hz4vv8:9000",
     ),
     "MINIO_PUBLIC_ENDPOINT": EnvSpec(
         "MINIO_PUBLIC_ENDPOINT", "storage", "string",