feat(storage): rebuild durable mutation reservation

[zhiiw]

Summary

• rebuild M2.3a on the current M2.1 successor-authority branch
• bind managed mutation identity and workspace-instance-exclusive reservation into the same T1 transaction
• persist exact authorized paths and reject generic T2 settlement
• rebuild active reservations from immutable RuntimeEvents
• prove cross-process exclusivity and real process kill/reopen behavior

Primary invariant

From managed T1 until a trusted terminal successor is committed, one workspace instance has at most one durable mutation owner. The reservation is a rebuildable SQLite projection of immutable T1 evidence, not a second source of truth.

Scope

This branch deliberately excludes the historical M2.2 Git CLI candidate owner. M2.2 waits for the new Gitoxide candidate/ref data plane. Runtime settlement remains M2.3b, and real Write/Edit composition remains M2.4.

Verification

• core and storage builds pass
• focused RuntimeEvent, authority, persistence, concurrency, and crash command: 76/76
• real multi-process arbitration and child-process kill/reopen are included
• old/new delivery comparison retains the M2.3a implementation (range-diff semantic match)
• ASF source-header audit and git diff --check pass

中文说明

本 PR 在最新 M2.1 平铺分支上重建 M2.3a：managed T1 与 workspace-instance-exclusive reservation 在同一个 SQLite transaction 中提交；reservation 只能从 immutable T1 重建，generic T2 无权结算。

它没有带入旧 M2.2 Git CLI candidate owner。M2.2 等待新的 Gitoxide candidate/ref 数据面，Runtime settlement 和真实 Write/Edit 分别留给 M2.3b/M2.4。当前定向 authority、并发与真实 crash 命令 76/76 通过。

[zhiiw]

Closed as an obsolete extraction/integration slice. The current delivery path is the merged Gitoxide foundation followed by #40 -> #41 -> #42. This PR remains available as design and implementation history.

中文说明

该 PR 属于旧 extraction/integration 栈，现已失去独立合并价值。当前交付路径是已合并的 Gitoxide 基础，然后依次审查 #40 → #41 → #42。这里继续保留设计、实现与审查历史。