Make state transitions durable

[clkao]

Prevent premature completion, incomplete archival, and accidental writes when workflow storage is missing.

What changed

• Verify delivery ancestry before consuming terminal approval.
• Commit complete retirement moves with rollback and publication recovery.
• Refuse missing or invalid state storage while preserving read-only rebase behavior.

Evidence

• Real Git/CLI failure and recovery checks, detached audit, and strict documentation build passed.
• Restacked above Use semantic branch and worker names #807 with unchanged owned patches; no dependency on Honor workflow-declared same-stage revision without mandatory reviewer machinery #801 or Recognize native Pi worker completion evidence #806.
• Reordered lower tip 6a575d7: normal/race passed every package except the existing cached-pre0 installed-host resolver failure; no race diagnostics. Live-tag compilation passed. Exact verification report.

---

3tz
Closes #689