fix(wasm): accept a password in classifyPdf and extractText

[devgabrielmarcondes]

processPdf and detectPdf accept options.password, but classifyPdf and extractText take no options, so an encrypted PDF reachable through one entry point is unreachable through the other two. The asymmetry matters most for extractText, which has no workaround at all, since the only alternative returns Markdown while its purpose is plain text.

The wasm crate cannot close this on its own, because load_document_from_mem_with_password is pub(crate) and the only public password-aware extractor is path-based, which no browser can use. The core crate therefore gains two public entry points that follow the _with_password convention already used for the path variant, while the current functions delegate to them with None so that their behavior does not change.

The password stays out of PositionOptions, since that struct is Copy and describes how items are reported rather than how the document is opened.

---

Summary by cubic

Adds options.password support to the WASM classifyPdf and extractText entry points, matching processPdf and detectPdf. Previously an encrypted PDF reachable through those two was unreachable through the other two, and extractText had no workaround since the only alternative returns Markdown.

Core crate changes

• Adds public classify_pdf_mem_with_password and extract_text_with_positions_mem_with_password entry points.
• Existing functions delegate to them with None, so behavior is unchanged.
• Keeps passwords out of PositionOptions, which is Copy and describes item reporting, not document opening.

^{Written for commit 4b4cbf8. Summary will update on new commits.}

[cubic-dev-ai]

No issues found across 4 files

Confidence score: 5/5

• Automated review surfaced no issues in the provided summaries.
• No files require special attention.

<sub>Shadow auto-approve: would auto-approve. Adds password support to WASM classifyPdf and extractText, matching processPdf/detectPdf. New core functions delegate with None to preserve existing behavior; backward-compatible, bounded API addition.

Re-trigger cubic</sub>