add pipeline orchestrator, mailbox 1583 flow, EIN + virtual-mailbox services

- Pipeline orchestrator: chains sequential fulfillment for new carrier bundles
  (formation → EIN → USDOT → MC → BOC-3 → MCS-150 → D&A → UCR)
- Mailbox setup: Anytime Mailbox provisioning with USPS 1583 e-sign + online notarization
- New services: ein-application ($79), virtual-mailbox ($149/yr)
- Registered all new handlers in SERVICE_HANDLERS
- Pipeline cron: every 5 minutes

infra/ansible/roles/worker-crons/defaults/main.yml

@@ -175,6 +175,15 @@ worker_crons:
     on_calendar: "*-*-* 12:00:00 UTC"
     persistent: true
 
+  # Pipeline orchestrator — every 5 min.
+  # Advances sequential service fulfillment (new carrier bundles, entity upgrades).
+  # Checks dependencies, forwards data between steps, dispatches next service.
+  - name: pw-pipeline-orchestrator
+    description: Advance multi-step compliance pipelines
+    module: scripts.workers.pipeline_orchestrator
+    on_calendar: "*-*-* *:0/5:00 UTC"
+    persistent: false
+
   # FMCSA email monitor — every 15 min (offset :05), checks for filing confirmations.
   - name: pw-fmcsa-email-monitor
     description: Check for FMCSA filing confirmation emails