- Wire canCompanyViewResume into candidate detail so ResumeVisibility (PRIVATE/APPLIED_COMPANIES/VERIFIED_COMPANIES) actually hides resume fields from companies.
- Add candidatePhone/candidateEmail to candidate detail, populated only when contactVisible=true, otherwise omitted via JsonInclude(NON_NULL).
- Migrate company candidate list/detail queries from EntityManager to ApplicationRepository Query, aligning with repository conventions.
- Document privacy behavior and add unit tests for visibility and contact logic.
pwklppg
Zhang Shun