Voice M8: recover interrupted History artifacts

[MarcusJRLee]

Summary

• reconcile partial, orphaned, and expiration-quarantine audio before retention
• preserve transcript evidence on audio finalization failure and isolate malformed SQLite records
• preserve physically corrupt database families, expose truthful Recovery sessions, and expire unpinned recovery audio after 24 hours
• surface recovery provenance in History and schema-revision-3 exports

Verification

• 469 tests in 71 suites
• strict Swift and Clang formatting, shell syntax, diff hygiene, and debug/product builds
• 5,000-session warm-search p95: 2.639 ms against 250 ms
• signed packaged UI: light, dark, increased contrast, reduced motion, large text, and keyboard navigation
• canonical signed app installed and launched; Team J4NB9RR32B, hardened runtime, audio-input entitlement, arm64, unchanged 1.4.1/17 metadata

Stack

Base: codex/voice_m7_retention. dev and main remain untouched.

[MarcusJRLee]

Integrated into dev through rebase-merged rollup PR #34. This intermediate PR remains preserved as the focused review record for its original slice.