Enforce the aggregate production quality gate in CI

[jonbaldie]

Closes #37

What changed

• Added a Node 22 Production quality GitHub Actions job that runs npm run quality:production on every applicable workflow run.
• Kept the Deno 2.7.6 Test → Mutasaurus → Stryker chain unchanged.
• Made clean aggregate output name all eight production units and verify/report CyclomaticComplexity plus NPathComplexity from the pinned typescript policy before enforcing the full report.

Why

Per-unit remediation is complete, but CI did not yet enforce the complete production surface. This final gate prevents a clean unit from concealing findings elsewhere and keeps policy selection auditable even when the report has zero findings.

Validation

• npm run quality:production — 8 units, required complexity rules, zero findings
• Temporary real production finding — aggregate exited 2 and reported it
• Workflow YAML parse and Node syntax check
• deno test --frozen=false --allow-all — 180 passed
• Mutasaurus — 98% overall, every file ≥80%
• Stryker — 94.72% overall, every file ≥80%
• Live process smoke — startup, unauthenticated health, authenticated enqueue, FIFO dequeue, persistence flush, SIGTERM exit 0
• Two-axis review: Standards pass; Spec pass