POST /public/document-requests/reactivate records the business intent and runs the onboarding analysis again.
The signed token is delivered in the final notice link. The operation is idempotent: reusing the same link does not create duplicate runs. The entity remains inactive until an operator completes a later decision.
success: true. An invalid token returns 401; an expired token, 410; and an unavailable request, 409.