fix: send PDF email for signed-in project scans

The audits table has a pdf_email column the worker reads to decide
whether to render the PDF + Resend it after a scan finishes. The
anonymous hero form populated it from the form field; the signed-in
project scan path (runScanForProject) silently inserted audits with
pdf_email=null, so the worker never sent the report.

Default pdf_email to the user's account email — matches the
expectation that a signed-in scan emails the result to the logged-in
user. Also passes it through notifyWorker so the in-flight HTTP
enqueue carries the email, not just the DB row.

Confirmed via DB inspection: recent project-page scans show
pdf_email=null while old hero-form scans show the email populated.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

Author: ralyodio

app/actions/runAudit.ts

@@ -209,6 +209,11 @@ export async function runScanForProject(input: {
   }
 
   const svc = serviceClient();
+  // Default the PDF-receipt email to the signed-in user's address. The hero
+  // form takes an explicit email; the project page doesn't ask, so we use
+  // the account email — matches the user's expectation of "I'll get the
+  // report emailed to me."
+  const pdfEmail = user.email ?? null;
   const inserts = engines.map((e) => ({
     target_url: target,
     project_id: input.projectId,
@@ -217,6 +222,7 @@ export async function runScanForProject(input: {
     share_token: newShareToken(),
     triggered_by: "manual",
     engine: e,
+    pdf_email: pdfEmail,
   }));
   const { data: rows, error } = await svc
     .from("audits")
@@ -242,7 +248,7 @@ export async function runScanForProject(input: {
       }),
     ),
   );
-  for (const r of rows) await notifyWorker(r.id);
+  for (const r of rows) await notifyWorker(r.id, pdfEmail ?? undefined);
 
   // Suppress unused-warning on paidEngines (it's documentation for now).
   void paidEngines;