feat: bind autonomous event pump to real Git effects

[veil-chow-fyaic]

Summary

• reuse the bounded Git worktree fixture in the coordinator-driven A -> R -> same-A -> V -> dependent event-pump path
• bind detached reviewer findings, direct-descendant fixes, process-isolated child-verifier signatures, trusted finalization, and dependent activation
• keep the reviewer-visible context blind to the sealed finding and validate model-reported evidence exactly across SQLite reopen
• add real-effects positive and wrong-finding negative end-to-end coverage with exact cleanup
• retain every M5.2 closure gate; this PR does not claim a successful real Codex effects run or liveProductEvidence=true

Validation

• 384/384 unit tests
• 55 schema cases
• 7 transition cases
• Markdown lint: 108 files, 0 issues
• three independent agent reviews; final result: no P0/P1, MERGE

Live-product status

Attempts 7–10 established partial real Git execution and cleanup only. The latest rerun was interrupted by a reproducible local DNS/TLS endpoint problem; TLS was not bypassed. One successful live real-effects traversal, the manual relay/polling baseline, minimum critical negative/restart evidence, OS-kill/heartbeat, global selection chain, and external verifier service remain open under #91.

Closes no issue. Advances #91.