"""Cross-domain lifecycle orchestration.

The ``hr`` domain module owns the HRIS sync (pulling data in from
SuccessFactors). The ``offboarding`` and ``provisioning`` domains
own their respective state machines. This module glues them together
into end-to-end flows that kick on a real event:

* :mod:`hire_day_service` — on an employee's ``hire_date``, push
  their IT info (account URLs, software list, 2FA, IT contact) via
  email + Feishu. Idempotent via ``identity_persons.it_info_sent_at``.
* :mod:`advance_service` — the data-freshness tick. When someone's
  ``termination_date`` arrives, forcibly transfer any remaining
  owner refs up the manager chain → IT Admin fallback, then in one
  transaction suspend SSO + flip ``employment_status`` to ``left``.
* :mod:`post_leaver_service` — T+1 verification sweep. Persons who
  transitioned to ``left`` yesterday get rescanned; any residual
  owner ref creates a critical ``compliance_incident``.
* :mod:`digest_service` — daily digest to IT admin: upcoming hires,
  today's leavers, open blockers, new compliance incidents.

All four are driven by ``scheduled_jobs`` rows (seeded in migration 038).
"""