feat(platform): complete software development control plane

[3300160875]

Summary

• add the complete software-development control plane: projects, repositories, knowledge, requirements, isolated execution, evidence, approvals, GitHub delivery, deployments, operations, retention, recovery, export/import, and evaluation
• preserve Telegram General as the unbound Team entry while isolating Codex CLI, Claude Code, Hermes, and Aion CLI topic sessions and their agent-scoped model catalogs
• enforce project/run/conversation/agent budget binding in real interactive and cron turns, with notify, pause, confirmed model downgrade, terminate, and pre-turn guards
• harden restart recovery with fencing tokens, atomic resource-cleanup claims, two-phase completion/cancellation, stale-owner rejection, and idempotent recovery decisions
• make GitHub the sole supported delivery provider and fail closed for unsupported hosts or unconfigured deployment adapters

Verification

• repository-required just push -u fork agent/platform-roadmap-completion-core passed at 9785541e
• migration immutability, full-workspace strict Clippy, formatting, and test compilation passed
• cargo nextest run --workspace: 7202/7202 runnable tests passed; 14 configured skips
• focused development, routes, operations, single-workspace, and recovery/fencing suites passed
• isolated real Codex ACP acceptance passed for baseline, notify, pause, gpt-5.6-luna downgrade, terminate, and post-action execution guards
• isolated GitHub fixture completed Branch, Push, PR, Actions/CI, Review, Merge, and Tag; deployment without a configured provider failed closed
• live Docker and Dev Container execution, timeout, cancellation, cleanup, restart, backup, and restore drills passed

Database and rollback

• preserves all upstream append-only migrations
• roadmap migrations remain append-only through 046_development_recovery_actions.sql
• reconciles previously deployed roadmap layouts only after exact description/checksum validation; unknown, modified, mixed, or non-contiguous histories fail closed
• existing conversations, messages, assistant sessions, Telegram topic bindings, projects, and development runs are preserved during verified copied-database upgrades
• rollout and rollback follow the companion AionUi acceptance ledger and restore guide

Remaining release gates

• deploy this Core candidate and complete a user/admin-originated Telegram General/four-topic/approval/Web-handoff acceptance run
• configure and verify an approved real deployment provider
• known-price provider usage remains unverified live; unknown prices are explicitly preserved rather than estimated

Companion UI

3300160875/AionUi#1