feat: job notes, deal-breaker score cap, richer cover letters, bulk action limit bump

- Add per-listing notes (JobNotes component, notes column, auto-save)
- Enforce hard score cap (≤15) when deal-breaker hits are present;
  add clearance/citizenship deal-breaker rules to scoring prompt
- Cover letter prompt now uses full search profile (experience level,
  skills, work arrangement, location, salary, industries, deal-breakers)
  and produces longer, name-signed output
- Include candidate name + location in sanitized scorer profile
- Raise MAX_JOB_ACTION_BATCH_SIZE from 100 → 2500 (shared constant)
- Update README with new features

Made-with: Cursor

README.md

@@ -20,11 +20,14 @@ Root `package.json` is an npm **workspace** root; day-to-day app commands usuall
 ## Features (high level)
 
 - **Sources**: Multiple boards and aggregators (exact list evolves; see docs and extractor packages).
-- **Scoring & tailoring**: LLM compares jobs to your resume profile; optional drafts for summary, headline, skills, and project selection.
+- **Scoring & tailoring**: LLM compares jobs to your resume profile; optional drafts for summary, headline, skills, and project selection. The scorer enforces hard caps when deal-breakers fire (e.g. clearance/citizenship conflicts cap score to 0-15) and includes candidate name and location in the profile sent to the model.
+- **Cover letters**: LLM-generated, profile-aware cover letters. The prompt uses the full job-search profile (experience level, target roles, must-have and nice-to-have skills, work arrangement, location, salary, industries, deal-breakers) and produces 4-5 paragraphs (~550 words) signed with the candidate's name.
+- **Job notes**: Per-listing personal notes with debounced auto-save, available in Discovered, Ready, and detail panels.
 - **PDFs**: Tailored exports via **Reactive Resume** (v4 or v5 API). Optional **local JSON resume** (`JOBOPS_LOCAL_RESUME_PATH` or Settings) as the base document for profile/tailoring; PDF export still uses RxResume when configured.
 - **Pipeline**: Scheduled or manual runs (`POST /api/pipeline/run`, webhook trigger).
 - **Post-application**: Optional Gmail-based inbox for interview/offer/rejection signals.
 - **Job list filters** (orchestrator UI): Narrow the pipeline job list by **multiple sources** and **countries** (country is inferred from each listing’s location text). Filters sync to the URL (`source`, `sourceExclude`, `countries`, `countriesExclude`). Each source/country chip cycles **off → include → exclude** (exclude shows in red); listings marked **remote** still pass country include/exclude rules.
+- **Bulk actions**: Select-all / batch actions support up to **2 500 jobs** per request (raised from 100).
 - **Data**: SQLite and generated artifacts under `./data` (default in Docker).
 
 ## Requirements