Repair native guest delivery and lifecycle recovery

[iteathen]

Fresh Linux guests could not receive their bootstrap seed because Hyper-V's Linux destination semantics were treated as a full filename. Correct that provider contract, preserve bounded native errors, and prove actual first access on disposable guests made from the accepted images.

Lifecycle construction and materialization now share explicit operation subjects, resume the accepted generation, and use operating-system leases that release on process death. Read-only snapshots remain available without a mutation lease. Setup continues ready accepted work serially, preserves independent usable profiles, and publishes accepted operational configuration separately from complete profile readiness. A versioned read-only diagnostic operation reports the owning lifecycle failure without changing existing v1 responses.

The first normal Hello World run exposed a separate transfer bottleneck: each small source frame reconstructed global foundation and image health. Activity composition now reads foundation identity independently, selects the exact subject/profile before native observation, and still rejects unavailable or incompatible selected environments. The execution owner sends bounded verified source packs through the existing bridge and reports preparation/transfer phases through durable run liveness. The unpack helper is execution-owned; accepted image payload bytes remain unchanged.

Validation:

• All four Windows/Linux Node 22.16.0 smoke/full CI jobs passed at e52840a41026c473285d09cc24ebea8645bfbddc (run 34279127226). Local preflight and focused contract/consumer checks passed.
• Fresh accepted-image Linux and Windows Hyper-V bootstrap qualifications passed with seed path/content readback and working bridge access; both disposable fixtures were cleaned up.
• Native read-only comparison returned the same selected environment and readiness: 10.702 seconds/eight native calls before, 3.318 seconds/two after. This is an observation benchmark, not a complete workflow timing claim.
• Normal installed Linux task Hello World qualification: Linux compile and test success #523 configured, compiled, and passed CTest; actual guest tool durations were 443 ms, 452 ms, and 133 ms. Completed work and a terminal GitHub comment are durable. The injected after-delivery failure is being reconciled without repeating these operations.

This remains a draft: the complete six-case Linux/Windows Hello World matrix and corrected native transfer timing are still outstanding. Hyper-V proof does not qualify Linux-host KVM/libvirt. GPU and MCP work remain later milestones.