fix(executor-core): F-Q-002 promote sdk::bridge::block_on, migrate 9 SDK modules

Replace ten near-identical `block_on` helpers (one per SDK module)
with a single shared `sdk::bridge::block_on(service: &str, fut)`.
The helper takes a service-prefix string and a future whose error
implements Display, so each module's `KvError`/`DocsError`/etc.
still self-formats.

Migrated:
- kv, docs, pubsub, users, dead_letters, secrets, files, email
- queue.rs has two helpers; the inline-shaped enqueue path and the
  block_on_u64 (u64→i64) wrapper are left in place — the latter
  could use the shared helper but the local form is one less call
  site per finding overlap. Will revisit on a later pass if needed.
- http.rs is intentionally NOT migrated: it has per-variant error
  mapping via `map_http_err` that the generic helper can't express.

Net: -218 / +97 lines across the 9 migrated files. Single source of
truth for the runtime-handle lookup and error wrapping.

AUDIT.md anchor: F-Q-002.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

crates/executor-core/src/sdk/files.rs

@@ -23,11 +23,9 @@
 
 use std::sync::Arc;
 
-use picloud_shared::{
-    FileMeta, FileUpdate, FilesError, FilesService, NewFile, SdkCallCx, Services,
-};
+use picloud_shared::{FileMeta, FileUpdate, FilesService, NewFile, SdkCallCx, Services};
 use rhai::{Array, Dynamic, Engine as RhaiEngine, EvalAltResult, Map, Module};
-use tokio::runtime::Handle as TokioHandle;
+use super::bridge::block_on;
 
 /// Per-call handle captured by the Rhai SDK. Cheap to clone (two Arcs
 /// plus an owned string).
@@ -84,7 +82,7 @@ fn register_create(engine: &mut RhaiEngine) {
                 content_type,
                 data,
             };
-            let id = block_on(async move { h.service.create(&h.cx, &h.collection, new).await })?;
+            let id = block_on("files", async move { h.service.create(&h.cx, &h.collection, new).await })?;
             Ok(id.to_string())
         },
     );
@@ -96,7 +94,7 @@ fn register_head(engine: &mut RhaiEngine) {
         |handle: &mut FilesHandle, id: &str| -> Result<Dynamic, Box<EvalAltResult>> {
             let h = handle.clone();
             let id = id.to_string();
-            let meta = block_on(async move { h.service.head(&h.cx, &h.collection, &id).await })?;
+            let meta = block_on("files", async move { h.service.head(&h.cx, &h.collection, &id).await })?;
             Ok(meta.map_or(Dynamic::UNIT, |m| file_meta_to_map(&m).into()))
         },
     );
@@ -108,7 +106,7 @@ fn register_get(engine: &mut RhaiEngine) {
         |handle: &mut FilesHandle, id: &str| -> Result<Dynamic, Box<EvalAltResult>> {
             let h = handle.clone();
             let id = id.to_string();
-            let bytes = block_on(async move { h.service.get(&h.cx, &h.collection, &id).await })?;
+            let bytes = block_on("files", async move { h.service.get(&h.cx, &h.collection, &id).await })?;
             Ok(bytes.map_or(Dynamic::UNIT, Dynamic::from_blob))
         },
     );
@@ -128,7 +126,7 @@ fn register_update(engine: &mut RhaiEngine) {
                 name,
                 content_type,
             };
-            block_on(async move { h.service.update(&h.cx, &h.collection, &id, upd).await })
+            block_on("files", async move { h.service.update(&h.cx, &h.collection, &id, upd).await })
         },
     );
 }
@@ -139,7 +137,7 @@ fn register_delete(engine: &mut RhaiEngine) {
         |handle: &mut FilesHandle, id: &str| -> Result<bool, Box<EvalAltResult>> {
             let h = handle.clone();
             let id = id.to_string();
-            block_on(async move { h.service.delete(&h.cx, &h.collection, &id).await })
+            block_on("files", async move { h.service.delete(&h.cx, &h.collection, &id).await })
         },
     );
 }
@@ -193,7 +191,7 @@ fn list_call(
     limit: u32,
 ) -> Result<Map, Box<EvalAltResult>> {
     let h = handle.clone();
-    let page = block_on(async move {
+    let page = block_on("files", async move {
         h.service
             .list(&h.cx, &h.collection, cursor.as_deref(), limit)
             .await
@@ -260,22 +258,3 @@ fn require_blob(meta: &Map, field: &'static str) -> Result<Vec<u8>, Box<EvalAltR
     }
 }
 
-/// Run an async future inside the synchronous Rhai context. Mirrors
-/// `kv::block_on`; safe because `LocalExecutorClient` runs the script
-/// under `spawn_blocking`, so a runtime handle is reachable.
-fn block_on<F, T>(fut: F) -> Result<T, Box<EvalAltResult>>
-where
-    F: std::future::Future<Output = Result<T, FilesError>> + Send,
-    T: Send,
-{
-    let handle = TokioHandle::try_current().map_err(|e| -> Box<EvalAltResult> {
-        EvalAltResult::ErrorRuntime(
-            format!("files: no tokio runtime available: {e}").into(),
-            rhai::Position::NONE,
-        )
-        .into()
-    })?;
-    handle.block_on(fut).map_err(|err| -> Box<EvalAltResult> {
-        EvalAltResult::ErrorRuntime(format!("files: {err}").into(), rhai::Position::NONE).into()
-    })
-}