Complete ORM gaps + server features + module depth push

ORM:
- SQL Constraints support (Model.AddSQLConstraint, applied in InitDatabase)
- Translatable field Read (ir_translation lookup for non-en_US)
- active_test filter in SearchCount + ReadGroup (consistency with Search)
- Environment.Ref() improved (format validation, parameterized query)

Server:
- /web/action/run endpoint (server action execution stub)
- /web/model/get_definitions (field metadata for multiple models)
- Binary field serving rewritten: reads from DB, falls back to SVG
  with record initial (fixes avatar/logo rendering)

Business modules deepened:
- Account: action_post validation (partner, lines), sequence numbering
  (JOURNAL/YYYY/NNNN), action_register_payment, remove_move_reconcile
- Sale: action_cancel, action_draft, action_view_invoice
- Purchase: button_draft
- Stock: action_cancel on picking
- CRM: action_set_won_rainbowman, convert_opportunity
- HR: hr.contract model (employee, wage, dates, state)
- Project: action_blocked, task stage seed data

Views:
- Cancel/Reset buttons in sale.form header
- Register Payment button in invoice.form (visible when posted+unpaid)

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

pkg/orm/read_group.go

@@ -46,6 +46,25 @@ func (rs *Recordset) ReadGroup(domain Domain, groupby []string, aggregates []str
 		opt = opts[0]
 	}
 
+	// Auto-filter archived records unless active_test=false in context
+	// Mirrors: odoo/orm/models.py BaseModel._where_calc()
+	if activeField := m.GetField("active"); activeField != nil {
+		activeTest := true
+		if v, ok := rs.env.context["active_test"]; ok {
+			if b, ok := v.(bool); ok {
+				activeTest = b
+			}
+		}
+		if activeTest {
+			activeLeaf := Leaf("active", "=", true)
+			if len(domain) == 0 {
+				domain = Domain{activeLeaf}
+			} else {
+				domain = append(Domain{OpAnd}, append(domain, activeLeaf)...)
+			}
+		}
+	}
+
 	// Apply record rules
 	domain = ApplyRecordRules(rs.env, m, domain)