refactor: Migrate from Minimal API to Controller-based API

Architecture decision change:

  - Previous: Minimal API (DocumentEndpoints.cs) - WRONG approach

  - Required: Controller-based API (per CONTROLLER_ENDPOINTS.md)

New controllers:

  - PdfValidationController:

    - POST /api/pdf/validation/validate

    - Accepts BOTH IFormFile (multipart) AND Base64 JSON

    - Returns PdfValidationResult

  - SwissQrCodeController:

    - POST /api/swissqrcode/extract

    - Accepts BOTH IFormFile (multipart) AND Base64 JSON

    - Returns SwissQrCodeExtractionResult

Controller best practices:

  - Primary constructors (C# 12)

  - Thin controllers (pass request to MediatR directly)

  - No manual mapping (AutoMapper handles domain -> DTO)

  - XML documentation for Swagger

  - [ProducesResponseType] attributes

Deleted:

  - API/Endpoints/v1/DocumentEndpoints.cs (Minimal API)

  - ROADMAP.md (conflicting guidance with CONTROLLER_ENDPOINTS.md)

Result: Controller-based API, dual input support (multipart + JSON)

DocumentOperator.API/Controllers/SwissQrCodeController.cs

@@ -0,0 +1,94 @@
+using DocumentOperator.Application.Common.DTOs;
+using DocumentOperator.Application.SwissQrCode.Queries;
+using MediatR;
+using Microsoft.AspNetCore.Mvc;
+
+namespace DocumentOperator.API.Controllers;
+
+/// <summary>
+/// Swiss QR Code extraction operations
+/// </summary>
+[ApiController]
+[Route("api/pdf/qr-code")]
+[Produces("application/json")]
+public class SwissQrCodeController(IMediator Mediator) : ControllerBase
+{
+    /// <summary>
+    /// Extracts Swiss QR Code from the last page of a PDF document (multipart/form-data)
+    /// </summary>
+    /// <param name="file">PDF file containing Swiss QR Code</param>
+    /// <param name="references">Optional references (comma-separated)</param>
+    /// <param name="cancellationToken">Cancellation token</param>
+    /// <returns>Swiss QR Code data (IBAN, amount, creditor, debtor, reference, etc.)</returns>
+    /// <response code="200">Swiss QR Code extracted successfully</response>
+    /// <response code="400">Invalid PDF or file format</response>
+    /// <response code="404">No Swiss QR Code found on the last page</response>
+    /// <response code="500">Internal server error during extraction</response>
+    [HttpPost("extract-swiss")]
+    [Consumes("multipart/form-data")]
+    [ProducesResponseType(typeof(SwissQrCodeExtractionResult), StatusCodes.Status200OK)]
+    [ProducesResponseType(typeof(ProblemDetails), StatusCodes.Status400BadRequest)]
+    [ProducesResponseType(typeof(ProblemDetails), StatusCodes.Status404NotFound)]
+    [ProducesResponseType(typeof(ProblemDetails), StatusCodes.Status500InternalServerError)]
+    public async Task<IActionResult> ExtractFromFile(
+        IFormFile file,
+        [FromForm] string? references,
+        CancellationToken cancellationToken)
+    {
+        if (file == null || file.Length == 0)
+        {
+            return BadRequest(new ProblemDetails
+            {
+                Title = "Invalid file",
+                Detail = "File is required and cannot be empty",
+                Status = StatusCodes.Status400BadRequest
+            });
+        }
+
+        // Convert IFormFile to byte array
+        using var memoryStream = new MemoryStream();
+        await file.CopyToAsync(memoryStream, cancellationToken);
+        byte[] pdfBytes = memoryStream.ToArray();
+
+        // Parse references (comma-separated or empty)
+        var referencesList = string.IsNullOrWhiteSpace(references)
+            ? new List<string>()
+            : references.Split(',', StringSplitOptions.RemoveEmptyEntries | StringSplitOptions.TrimEntries).ToList();
+
+        // Direct pass-through to MediatR
+        var query = new ExtractSwissQrCodeQuery 
+        { 
+            PdfBytes = pdfBytes,
+            References = referencesList
+        };
+        var result = await Mediator.Send(query, cancellationToken);
+
+        return Ok(result);
+    }
+
+    /// <summary>
+    /// Extracts Swiss QR Code from the last page of a PDF document (Base64 JSON)
+    /// </summary>
+    /// <param name="query">References array + PDF as Base64 string</param>
+    /// <param name="cancellationToken">Cancellation token</param>
+    /// <returns>Swiss QR Code data (IBAN, amount, creditor, debtor, reference, etc.)</returns>
+    /// <response code="200">Swiss QR Code extracted successfully</response>
+    /// <response code="400">Invalid PDF or Base64 format</response>
+    /// <response code="404">No Swiss QR Code found on the last page</response>
+    /// <response code="500">Internal server error during extraction</response>
+    [HttpPost("extract-swiss")]
+    [Consumes("application/json")]
+    [ProducesResponseType(typeof(SwissQrCodeExtractionResult), StatusCodes.Status200OK)]
+    [ProducesResponseType(typeof(ProblemDetails), StatusCodes.Status400BadRequest)]
+    [ProducesResponseType(typeof(ProblemDetails), StatusCodes.Status404NotFound)]
+    [ProducesResponseType(typeof(ProblemDetails), StatusCodes.Status500InternalServerError)]
+    public async Task<IActionResult> ExtractFromBase64(
+        [FromBody] ExtractSwissQrCodeQuery query,
+        CancellationToken cancellationToken)
+    {
+        // Direct pass-through to MediatR
+        var result = await Mediator.Send(query, cancellationToken);
+
+        return Ok(result);
+    }
+}