feat(storage): bind and cancel managed dependency admission

[zhiiw]

Summary

Binds attested dependency environments to managed workspace execution and makes admission lifecycle authoritative across storage owners. This slice owns dependency binding, canonical node_modules routing, dependency singleflight, abandoned-publication replacement, baseline admission cancellation, and owner drain.

Primary invariant

Only an owner-bound, cancellable, and drainable managed admission may issue an execution scope. Cancellation or Host drain must prevent scope issuance or revoke the abandoned acquisition, and a new caller must never inherit a previous caller's aborted singleflight publication.

• Owner: managed workspace storage owner
• Atomicity boundary: root admission lock + validated source baseline + dependency lease + revocable execution scope
• Failure state: source drift, abort, invalid dependency routing, or cancelled publication fails closed; there is no managed-worktree fallback
• Rollback: remove dependency-mode admission while preserving canonical-tree managed execution

Verification

Focused tests cover source HEAD/tree drift on reopen, shared publications, last-waiter abort/new-waiter races, baseline lock cancellation, immediate cancellation before scope issuance, owner drain, and canonical node_modules routing. Glob coverage now uses the real worker contract: dependency Glob results are relative to the routed cwd and are reconstructed under the caller's logical node_modules/** root.

Stack

1. durable dependency artifact authority
2. constrained npm producer
3. bundled npm runtime attestation
4. This PR: owner-bound and cancellable managed admission authority
5. production managed inspection task + crash/replay proof

中文说明

本切片把 dependency execution binding 与 admission cancellation 收敛到同一个 storage owner：只有经过 canonical source baseline、dependency lease 和取消检查后，才能签发可撤销 execution scope。

本轮补齐了真实 worker 的 Glob 相对路径映射、baseline 锁与 Git 操作的取消传播，以及 scope 签发前的最后一次取消检查。source drift、非法 dependency 路径和已撤销 singleflight publication 都会 fail closed，不会回退到 managed worktree 的同名目录。

[zhiiw]

Closed as an obsolete extraction/integration slice. The current delivery path is the merged Gitoxide foundation followed by #40 -> #41 -> #42. This PR remains available as design and implementation history.

中文说明

该 PR 属于旧 extraction/integration 栈，现已失去独立合并价值。当前交付路径是已合并的 Gitoxide 基础，然后依次审查 #40 → #41 → #42。这里继续保留设计、实现与审查历史。