feat(ticket-028): adopt conflict-safe merge streaming

[tom-sapletta-com]

Outcome

Adopt immutable wellmanifest/new-project 0.19.19 at 43999c793a86084b4c3198fe07be350105db59ec and install resumable, conflict-safe streaming governance without weakening exact-HEAD merge authorization.

Delivery model

• canonical durable worktrees and overlap guard
• remote-aware ticket allocation and continuity checkpoints
• draft-PR streaming before a single final HEAD freeze
• OneDev onedev/local-verify remains the required repository check
• protected validator-agent provides exact-HEAD review and merge authorization
• GitHub-hosted checks are not merge requirements

Validation so far

• Goal adoption: up-to-date at exact published SHA
• governance gate: 0 errors, 0 warnings
• agent-host contract: pass
• worktree overlap: pass
• Docker Compose config: pass

Ticket: ticket-028
Issues: #41; unblocks #37 without implementing it.

Correlation ID: koru-ticket-028-merge-streaming-20260901

[ifuri-validator-agent]

Deterministic Validator approval for exact head dab053e7e919bb6f64e1333f46c02a77515525fd.

Ticket: ticket-028
Correlation ID: koru-pr-62-ticket-028
Model: zai/glm-5.3
Advisory LLM review: LLM_UNAVAILABLE
Reason: advisory_review_budget_exceeded: full review requires 60 chunks; limit is 8
This approval rests on the deterministic checks alone; no advisory opinion was recorded for this head.
Merge will be attempted after this approval when explicitly authorized.

Decision record (recomputable)

DECISION D-028-8681
TICKET ticket-028
HEAD_SHA dab053e7e919bb6f64e1333f46c02a77515525fd
CORRELATION_ID koru-pr-62-ticket-028
ACTOR agent:ifuri-validator-agent[bot]
APPLIED_RULE P-CORE-015
INPUT author_login = "tom-sapletta-com"
INPUT observed_checks = ["governance / remote lifecycle=PASS","governance / enforce=PASS","onedev/local-verify=PASS"]
INPUT required_checks = ["onedev/local-verify"]
INPUT required_checks_source = "protected registry + GitHub applied rules (env/request)"
INPUT reviewer_login = "ifuri-validator-agent[bot]"
INPUT superseded_checks = ["smoke"]
VERDICT APPROVE AUTHORITY DETERMINISTIC
REJECTED REQUEST_CHANGES BECAUSE NO_UNSAFE_CHANGE_REASON_FOUND
ADVISORY llm_verdict = "" MODEL "zai/glm-5.3"
ASSERT VERDICT_AUTHORITY != "ADVISORY"