Cancel all pending signatures of a signature workflow

Cancels every in-flight signature for the workflow at once — used when scrapping a deprecated workflow without waiting for outstanding experiments to clear. The body carries an optional cancellation reason recorded on each signature's audit log.