v2.4.17 — recording-admission module + flush ledger writes

The /start/recording decide→self-heal→re-decide loop is now a testable module (5 unit tests on the path that ate Sunday's matinee). Also: alerts.jsonl writes are now flushed (fixes a real durability bug + the flaky test).