Kick off a fill. canAccessPatient gates the patient by role; startFormFillRun proves form,
patient and contacts belong to entityId (from the session, never the body); the retrieval scope is
checked by assertKickoffScopeBelongsToPatient. Returns queued by construction.
Kick off a fill.
canAccessPatientgates the patient by role;startFormFillRunproves form, patient and contacts belong toentityId(from the session, never the body); the retrieval scope is checked by assertKickoffScopeBelongsToPatient. Returnsqueuedby construction.