Fix worktree transport admission visibility (#1285)

[chubes4]

Summary

• Keep freshness verification on the repository's registered origin transport; retries no longer synthesize SSH.
• Reuse a five-minute explicit-refresh proof only for the exact origin/<ref> and SHA observed by that refresh.
• Include bounded admission deadline evidence in normal and JSON CLI lock progress, and attach a safe replay command to admission timeouts.

Before

• A primary refresh over recorded HTTPS could be followed by worktree freshness retry over synthesized SSH, failing when no SSH identity was loaded.
• Queued worktree admission could appear silent; normal progress did not expose a bounded deadline.

After

• Both freshness attempts use the configured remote, and an immediate matching HTTPS refresh proof avoids a second fetch entirely.
• Queue progress identifies request, scope, queue position, owner, elapsed time, deadline, and ETA; deadline expiry remains typed and retryable.

Verification

• composer validate --no-check-publish
• Targeted PHP tests for transport, proof reuse/expiry, queue/lifecycle locks, aggregate deadline cleanup, and CLI progress output.
• PHP lint for changed production and test files.
• Live CLI verification was not run because this worktree is not deployed to the installed plugin source.

AI disclosure

OpenAI GPT-5.6-terra via OpenCode.