feat(storage): rebuild workspace successor authority

[zhiiw]

Summary

• rebuild M2.1 directly from current upstream main
• define strict causal workspace-successor facts and canonical head scanning
• atomically commit successful T2 outcome, successor fact, projections, and head CAS in SQLite
• reject failed outcomes, stale bases, malformed evidence, and generic-writer bypasses
• preserve exact retry after later valid head advancement

Primary invariant

A successful tool outcome, its successor workspace version, and the canonical workspace head are either all visible from one SQLite transaction or all absent. RuntimeEvents remain canonical; projections are rebuildable and generic writers cannot occupy the authority lane.

Extraction discipline

Tests were migrated first and observed RED on current main. Production code was then migrated file-by-file from the historical M2.1 branch. This branch is based directly on upstream/main@19cd9e782; it does not include Git candidate, M1.3, Desktop/CLI, or Write/Edit composition code.

Verification

• core/storage builds pass
• focused authority and persistence suites: 38/38
• real child-process SQLite crash boundaries included
• old/new delivery comparison retains the M2.1 implementation (range-diff semantic match)
• ASF source-header audit, Astryx surface inventory, and git diff --check pass

中文说明

本 PR 从 upstream/main@19cd9e782 平铺重建 M2.1。它只证明：成功 T2、workspace successor fact、projection 与 canonical head CAS 必须在同一个 SQLite transaction 中同时可见或同时不可见；RuntimeEvent 是唯一事实源，projection 可以严格重建。

迁移顺序是先测试并确认 RED，再迁最小生产实现。没有带入 Git candidate、M1.3、Desktop/CLI 或真实 Write/Edit 组合。真实子进程 crash、ASF header、Astryx inventory 与 path/range diff 均已验证。

[zhiiw]

Closed as an obsolete extraction/integration slice. The current delivery path is the merged Gitoxide foundation followed by #40 -> #41 -> #42. This PR remains available as design and implementation history.

中文说明

该 PR 属于旧 extraction/integration 栈，现已失去独立合并价值。当前交付路径是已合并的 Gitoxide 基础，然后依次审查 #40 → #41 → #42。这里继续保留设计、实现与审查历史。