A batch report should know less than its manifest

PDFFence 1.25 adds manifest-driven PDF batch review with opaque public IDs, private paths, and a CI gate for added or removed documents.