b7211468b2
Block fp.certificate.action_issue on Nadcap / Mill Test / Customer- Specific certs when attachment_id is empty. These three cert types are manual-attach only — operator uploads the supplier doc / regulator-issued cert / filled customer template PDF before the cert can be issued. Prevents shipping the customer an empty PDF. _fp_render_and_attach_pdf gets an early-return guard so an orphan- type cert never tries to render a CoC QWeb template. Sub: docs/superpowers/specs/2026-05-27-recipe-cert-toggles-design.md Task: T5. Makes test_orphan_cert_issue_blocks_without_attachment pass. Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>