feat(runtime): narrow managed mutation settlement authority

[zhiiw]

Summary

• issue Runtime-owned immutable outcome proofs for managed Write/Edit settlement
• bind no-effect terminal facts to the exact T1 mutation identity
• expose SQLite workspace mutation authority only through an owner-bound execution-stores capability
• explicitly adopt ordinary pre-authority runtime state while rejecting pre-existing unbound workspace authority facts

Main invariant

After managed T1, the Host may commit a Git/SQLite terminal proof, but it cannot reconstruct or replace the provider result or response event owned by Runtime.

Atomic boundary and failure states

• T1 reservation remains the durable execution admission boundary.
• Successor/head or no-effect terminal/reservation release remains one SQLite transaction.
• Missing or mismatched owner proof fail-stops as unsettled; generic T2 fallback remains forbidden.
• Git candidate promotion is intentionally left to the next stacked slice.

Verification

• Core, Storage, Runtime, and Runtime Host builds
• ToolRuntime durable boundary: 45/45
• workspace version persistence + execution-store capability: 31/31
• git diff --check

中文说明

本切片收窄 managed Write/Edit 的结算权限：provider result 和精确 RuntimeEvent response 只能由 Runtime 生成一次，Host 只负责提交 Git/SQLite 终态证明，不能重建或替换结果。

同时新增 owner-bound execution-stores capability。普通会话数据已经存在、但从未产生 workspace authority facts 的数据库，可以由已认证 storage root 显式 adoption；如果已有未绑定的 workspace facts，仍然 fail closed。

本切片不推进 Git accepted ref，也不接 Desktop/CLI；这些放在后续堆叠切片中完成。

�

[zhiiw]

Superseded by the rebuilt delivery stack #40 -> #41 -> #42. This extraction PR remains available as implementation and review history; no validated logic was discarded.

中文说明

该 extraction PR 已由从最新 main 重建的组合交付栈 #40 → #41 → #42 替代。这里仍保留实现与审查历史，已验证逻辑没有被丢弃。