fix(kanban): attest worktrees before lifecycle release

[lockonster-lab]

Summary

Adds fail-closed lifecycle admission for declared Git worktrees.

Behavior

• stores immutable source-root and base-SHA attestation for declared worktrees;
• exposes target-only hermes kanban worktree-preflight <task-id> --json;
• denies missing, wrong-branch, wrong-base, dirty, or foreign worktrees before
  promotion or claim can create a run;
• never provisions a worktree or falls back to HEAD in this path.

Validation

• focused suites: 58 passed;
• expanded lifecycle suite: 266 passed; one known unrelated fake-PID SIGTERM
  guard failure (fix(install): create ~/.hermes before moving Node.js directory NousResearch/hermes-agent#53).

Stack

This draft is intentionally based on codex/upstream-reconcile, which carries
the prerequisite coordinator-only governance line. It is not ready to merge
until that integration base is reviewed.