feat: close production-path local acceptance

[shenjiecode]

Closure 6

Adds image-native local/release acceptance around the production Pi SDK session factory and custom-tool loop. Evidence is evaluated per proof and per AC rather than inferred from aggregate status. Local child processes use an isolated HOME and minimal environment; live inputs and release status remain independent and fail closed.

This PR also closes the production-path gaps discovered during aggregate verification:

• special three-Session review performs Harness data/evidence/adapter finalization while retaining only patch and report
• first branch creation is proven end-to-end through FIFO, prepared/resolved target, and one real six-Session Pi initialization Run
• submission returns queued state immediately and dispatches Git/Run work in the background
• manual and retention cleanup both require completed stored archive and completed associated queue/archive/publish state
• live preflight requires all 38 non-production, model, OSS, deletion, allowlist, authorization, and credential-lifecycle inputs
• quality image includes its workflow contract and uses a 60-minute CI timeout

Acceptance

• AC-CLOSURE-PI-01
• AC-CLOSURE-ACCEPT-01
• AC-CLOSURE-ACCEPT-02
• Revalidates all Closure 0–5 local ACs

Verification

• format, lint, typecheck, build
• full suite: 124/124
• fresh image-native local acceptance: 24/24 proofs, 14/14 ACs, local=passed
• release without live authorization: local=passed, live=blocked, release=blocked, exit 1
• fresh runtime image: non-root, health, six role resources, migration 0006
• independent final review: no blocking issue
• Quality workflow before merge

Closure 7 live resources are intentionally not used by this PR.