Preserve active workspaces until lifecycle authority is proven

[bigboateng]

Summary

• add one lifecycle assessment for workspace status, cleanup, reclaim counting, and reaping
• require durable publication evidence before Git ancestry can establish landing
• carry explicit repository identity through detached planning, readiness, approval, and activation paths
• reject ambiguous detached controller aliases deterministically
• add composed lifecycle/identity regressions and reviewed caller inventories

Verification

• python3 -m unittest discover -s .github/tests -p "test_*.py"
• python3 .github/scripts/release_notes.py validate --repo .
• go test ./...
• go vet ./...
• all 749 Go tests across eight isolated shards
• git diff --check