Fail closed lifecycle state during reconciliation

[Pigbibi]

Summary

• Reuse a small static resolver for lifecycle state instead of duplicating inline parsing.
• Default omitted runtime enablement to disabled, matching runtime admission.
• Treat RECONCILE_ONLY as disabled for the standard execution heartbeat while retaining the configured execution lane.

Safety

• No broker request, credentials, deployment, runtime-target mutation, CAS, or order path changed.

Validation

• uv run --no-sync python -m pytest -q tests/test_runtime_target_lifecycle_state.py tests/test_runtime_monitor_workflows.py tests/test_runtime_heartbeat_policy.py tests/test_broker_reconciliation.py
• uv run --no-sync ruff check scripts/runtime_target_lifecycle_state.py tests/test_runtime_target_lifecycle_state.py tests/test_runtime_monitor_workflows.py
• actionlint .github/workflows/runtime-target-lifecycle.yml
• git diff --check