fix(reconcile): preserve staging work after historical promotions

[0xPlayerOne]

Summary

• Treat final tree content as the authority when classifying post-release reconciliation.
• Ignore unexpected paths from historical main-only aggregate commits only when those paths are absent from the final tree delta.
• Keep genuine main-only content differences fail-closed, and preserve strict behavior when final-tree metadata is unavailable.

This unblocks Cortana's current staging promotion topology without expanding the approved release allowlist.

Validation

• node --check src/lib/release-policy.mjs
• node --check test/cli.test.mjs
• Focused reconciliation tests: 7 passed
• Full npm test: 100 passed
• npm run build
• npm run lint

npm run type-check was not run because this checkout has no installed TypeScript dependency. No Cortana data sync was run.

[kilo-code-bot]

Code Review Summary

Status: No Issues Found | Recommendation: Merge

Files Reviewed (2 files)

• src/lib/release-policy.mjs
• test/cli.test.mjs

---

_{Reviewed by step-3.7-flash · Input: 53.5K · Output: 9.7K · Cached: 677.9K}