RAGE #61: filesystem Auto-Dig persistence and initfile config

[lost-rob0t]

Implements #61 through Task Steward -> GitFlow -> RAGE/ADARD.

ADARD complete:

• Analyze: Auto-Dig lifecycle previously persisted via synthetic __autodig__:<workspace> journals on the general workspace store; production workspace storage is Tek9/LMDB and Quasar had no initfile layer.
• Design: dedicated Auto-Dig run-store boundary; legacy journal/Tek9 compatibility adapter remains default; atomic filesystem adapter is opt-in; initfile loads before production control-plane/store construction.
• Adversarial review: path traversal, malformed/truncated state, restart request-id replay/conflict, pause/resume/stop restoration, worker lease/fencing restoration, init-path precedence/fail-closed loading, and legacy journal compatibility are covered.
• Decision gate: implementation admitted only after a tests-first branch head.
• Realize/TDD: tests-only head 7f87f177840963186ae6ff594106d8765ffef46a produced observed RED in CI run 32949408261: Common Lisp test compilation failed because QUASAR.AUTODIG.STORE did not yet exist. Minimum production implementation followed.
• Verify/evaluate: exact final head 951033b24a569fbf49523d5a4501c9330f2677cf passed CI run 32950285190: format/lint/types/boundaries/static checks, frontend tests/build, Common Lisp transaction/persistence/control-plane tests including the new restart/adversarial suites, real quasar-web load, development-stack smoke, Playwright desktop/mobile/mutation/reload paths, and packaged production build/serve/routing/PWA/security smoke.

Resulting contract:

• default Auto-Dig persistence remains :tek9 through the existing durable Quasar journal semantics;
• optional :filesystem persistence stores Auto-Dig lifecycle events under a configured/XDG data root with fixed derived filenames and complete-file atomic replacement;
• request-id idempotency/conflict semantics, lifecycle state, and worker leases survive restart;
• Quasar init selection is --init/-i -> QUASAR_INIT_FILE -> XDG config path, with missing file creation from example_configs/init.lisp and fail-closed invalid config;
• scripts/run-production preserves runtime arguments so --init actually reaches quasar-server;
• no Bixby/Samsung-specific code or schema is introduced.

Exact-head GREEN; merge gated only on unchanged head/base and repository mergeability.