feat: evaluate runtime completion governance

[xiaojiou176]

Summary

• add a runtime completion governance evaluator during run finalize
• persist a completion governance report and queue unblock tasks from runtime decisions
• project the runtime governance read-back into dashboard and desktop Run Detail

Verification

• bash scripts/run_orchestrator_pytest.sh apps/orchestrator/tests/test_completion_governance_runtime.py apps/orchestrator/tests/test_scheduler_bridge_finalize_edges.py apps/orchestrator/tests/test_schema_validation.py -q
• pnpm --dir apps/dashboard exec vitest run tests/rundetail_core.suite.tsx
• pnpm --dir apps/desktop exec vitest run src/pages/run_detail_page_controls.test.tsx
• pnpm --dir apps/dashboard exec tsc -p tsconfig.typecheck.json --noEmit
• pnpm --dir apps/desktop exec tsc -p tsconfig.json --noEmit
• npm run docs:check
• npm run scan:host-process-risks
• npm run truth:triage
• pre-commit run --all-files
• npm run ci

Notes

• repo-side truth is green; truth:triage still fails only on external upstream Docker receipts (ci-core-image, ui-audit-playwright)
• this slice advances Wave 2, but it does not claim Wave 2 is fully closed because Context Pack and Harness Request still lack a real runtime lifecycle