[Lifecycle] Bind plans to evidence freshness and authenticated ownership lineage

[pate0304]

Outcome

Preserve safe preview, apply, update, and rollback when generated roles depend on repository evidence.

Acceptance criteria

• Plan confirmation binds the admitted TeamDesign, output content, output preimages, and all relevant evidence digests.
• Apply re-audits or verifies evidence preconditions before mutation.
• First install refuses forged manifests, preseeded markers, or user-owned agent collisions without explicit adoption.
• Update and deletion require valid transaction lineage and unchanged owned hashes.
• Rollback never overwrites later user edits.
• Replay and no-change behavior are documented and tested.