Force-unpublish partner submission (super-admin)
Force-unpublish a previously-approved partner submission (HG operators only). Stamps the submission's flag audit columns AND removes the materialized blueprint from every public catalog read path. Existing tenant instances that already cloned the blueprint are unaffected. Idempotent — re-running preserves the original unpublished_at/unpublished_by_user_id and updates the reason. Requires an HG super-admin user; partner-org admins are rejected with forbidden_super_admin.
Parameters
| Name | Type | Required | Default | Description |
|---|---|---|---|---|
submissionId | string | ✅ Yes | - | UUID of the previously-approved partner submission to force-unpublish. |
reason | string | ✅ Yes | - | Short operator note explaining why this approval is being demoted (1–2000 chars). Stored on both the submission row (as the flag reason) and the blueprint row (as the unpublish reason) for audit. |