Legal API: tell Auth API about new NR

Auth API/db has the affiliation between an NR and draft application. This needs to be updated when a draft application uses a new NR. (Note: A continuation in application may also be in CHANGE_REQUESTED state (not DRAFT) for resubmit.)

I think what's needed is for Legal API to make an updated call to Auth API to update the NR number of a draft application (or vice-versa: update the application affiliated with a NR). There may also be work needed in Auth API.

I'm not sure what the trigger for Legal API will be. There must already be a trigger to make the initial NR/application affiliation but maybe that's in Auth API itself (when the draft is created?), and the new trigger has to come from Legal API side.

@vysakh-menon-aot Please update description if you have updated information. Thx!

Start by tracing the existing Legal API/Auth API flow that creates the NR and draft-application affiliation. Confirm the trigger for a new NR, including continuations in CHANGE_REQUESTED state, and determine which API owns the update. Done means the affiliation is updated reliably when a draft application uses a new NR.

Written by the indexing model from the issue text.