feat(rate-of-closure): recover durable authority jobs

[d-sorgcodexagent]

Summary

• persist source-loopback authority jobs, exact status evidence, and complete results in a versioned locked SQLite/WAL store
• reconcile interrupted queued/running work to execution_failed/authority_restart without automatic physics replay
• add explicit React GET-only retained-status recovery with truthful 404/result-failure handling and no restored confirmation
• fail closed on corruption, version/schema mismatch, lock contention, symlink paths, oversized state, digest substitution, transaction failure, or live persistence loss
• declare and lock the clean rate-of-closure-web runtime dependencies and installed package graph

Stack

• parent: feat(ground-study): cancel qualified flight recomputation #4375 at exact head 9561dae8c048a511722619a7dfdaf065bb1667c7
• base branch: codex/4369-flight-recompute-cancellation
• related: Ground variation: bind a qualified execution job and browser-capable executor #4369 (partial continuation; does not close the issue)

Verification

• 1,252 Rate-of-Closure Python/PyQt tests passed; one Windows-only POSIX mode-bit test skipped
• 137 React test files / 909 tests passed
• TypeScript type-check, zero-warning ESLint, and production Vite build passed
• hard authority-process loss tests prove exact complete-result survival and non-replay interruption reconciliation
• atomic rollback, corruption, locking, path, API 503, and GET-only recovery regressions passed
• Ruff check/format, changed-source MyPy, strict <400-line module budget, deterministic fixtures, manifest checks, uv lock --check, clean-extra wheel import, and git diff --check passed

Explicit limitations

This qualifies source-loopback restart evidence only. Static-host companion discovery, frozen-runtime qualification, PyQt direct-worker recovery, installed Windows ACL qualification, automatic replay, compiled/TypeScript regional physics, downstream parity, ancestor integration, and protected release remain open.

Human review is approved operationally; ordinary protected checks and dependency order remain authoritative.

[dieterolson]

Consolidated into #4410. Closing to reduce CI/CD runner load.