Delivery: add persistent bounded workflow controller

[Wibias]

Stack

PR 4 of the v0.5.0 reliability/convergence rewrite. Stacked on PR #225.

Scope

• lock the selected workflow route
• enforce explicit legal phase transitions
• persist completed phases, refs, blockers, evidence and attempts
• define measurable progress independently of narration
• enforce no-progress escalation, phase retries, evidence actions, workflow steps, tokens and wall time
• invalidate state-bound evidence when relevant refs change
• add atomic checkpoint persistence and resume without repeating completed phases

TDD status

This PR begins RED with the controller contract. PR #225 provides the shared semantic evidence registry consumed by this controller.

Stack contract

PR 5 will map every GitHub Delivery workflow onto this controller and its phase packets. PR 6 then supplies real-incident/adversarial replays and performance gates before v0.5.0 release.

[cursor]

Bugbot is not enabled for your account, so this pull request was not reviewed.

Enable Bugbot in the Cursor dashboard to get automatic reviews on future PRs.