feat(jira): mature iteration feedback in place (#697)

[ayushtr-aws]

Matures one Jira iteration status comment from acknowledgement through heartbeat to terminal outcome. This is PR 3 of 3 for #580 and is based on #726.

Area

• cdk - infrastructure, handlers, constructs
• agent - Python runtime / Docker image
• cli - bgagent client
• docs - guides or design sources (docs/guides/, docs/design/)
• tooling - root mise.toml, scripts, CI workflows

Related

Closes #697

Parent: #580

Stack: #725 -> #726 -> #727

Changes

• Return and persist Jira comment IDs, and support in-place comment updates through Forge and OAuth paths.
• Generalize iteration heartbeats to Jira while guarding terminal claims so a running update cannot overwrite a final outcome.
• Assign standalone terminal maturation to fanout and orchestrated-child maturation to the reconciler before dependent restacking.
• Add shared terminal rendering, scoped registry and secret permissions, Forge proxy support, tests, and Jira setup documentation.

Verification

• mise run build
• Full CDK suite: 178 suites, 3,554 tests
• Focused CDK coverage: 429 tests
• Jira Forge proxy suite: 11 tests
• GITLEAKS_RANGE=origin/main..HEAD mise run security:secrets:range

Acknowledgment

By submitting this pull request, I confirm that you can use, modify, copy, and redistribute this contribution, under the terms of the project license.