Bind active identity and team scenes to the exact Reviewer verifier

[adrianwebb]

Objective

Publish immutable verifier registry entries for every active authentication, account, and team browser scene. Reviewer owns execution; Admin owns the scene manifests and case declarations.

Requirements

• Bind all 20 unique active execution keys to the packed Reviewer browser-scene verifier artifact.
• Retain the existing Admin and API artifact verifiers.
• Generate and test the normalized guarantee catalog from the packed Admin artifact.
• Do not move API credential or policy authority into Admin.

Platform generation 63 currently fails closed because these scene keys are undeclared.

[adrianwebb]

Implementation is in #29. Live catalog-derived evidence currently passes registration, one-use email confirmation, password reset, OAuth consent/sign-in, and team creation. The verifier is intentionally exposing remaining stale account/team scene and route mismatches instead of claiming them.

[adrianwebb]

The live catalog-derived run identified five stale assumptions in the browser scenes. The follow-up now proves the current Start orientation, explicit one-use confirmation for added email addresses, an extra revocable session without trusting spoofed edge IP metadata, global notification preferences when no real project exists, and durable theme activation after reload. Admin unit suite: 17 files / 83 tests passing. I am rerunning the exact graph through the development overlay before merge.

[adrianwebb]

Live development graph update: UI → Core → Admin propagation is working without a package release. Browser acceptance exposed and this branch now fixes two catalog-boundary defects: high-risk mutations replay only with the API-signed confirmation state, and the team access adapter normalizes the authoritative envelope so owner/project-lead controls fail closed correctly. Focused catalog tests pass. UI PR treeseed-ai/ui#16 separately adds the required concurrency revision and idempotency key for durable appearance preferences.