WA-NEW-009: Replace deprecated update_attributes in production code

[kitcommerce]

Summary

Replace all deprecated update_attributes / update_attributes! calls with update / update! across core production code (core/app/**, core/lib/**). This is required for Rails 7 where update_attributes is removed.

Also includes the WA-NEW-008 password reset fix (error-copying updated for Rails 7 compatibility).

Closes #626

Client impact

None expected. update / update! are drop-in replacements with identical behavior. No public API changes.

Verify

bundle exec ruby -Icore/test core/test/models/workarea/user/password_reset_test.rb

Files changed

17 files across core models, services, workers, seeds, and lib.