fix(cli): make repair rollback state verifiable

[felirami]

Status: ready for maintainer merge decision. Exact head 34360f6a92242e0feb808006882d509d12da65b2 preserves explicit invalid terminal flags and rejects own non-boolean markers before verification. Exact-head remote gates, independent review, and GitHub CI pass.

Summary

This updates the repair-safety candidate with the remaining fail-closed execution boundaries found during release review.

• rejects missing, null, malformed, timed-out, aborted, signaled, truncated, and nonzero apply results
• preserves process-boundary metadata through catalog adapters instead of reducing results to status === 0
• defaults terminal flags only when absent, preserving explicit null/undefined for fail-closed classification
• routes known catalog repairs through the transactional engine before any legacy fallback
• returns immediately after an engine-confirmed repair so legacy code cannot execute the same repair twice
• prevents a later healthy gateway probe from overwriting a failed restart result
• keeps unsafe bulk repair disabled unless every item receives preflight, preview, apply, rollback, and verification semantics

Safety contract

A repair is reported as applied only after an unambiguous successful apply result and post-apply verification. Execution ambiguity is failure, not success. Rollback and result evidence remain bounded and do not expose generated token values.

Validation

Exact candidate head: 34360f6a92242e0feb808006882d509d12da65b2

• Node suite: 472/472 passed
• focused repair engine/catalog suite: 108/108 passed
• Remediation contracts: 7/7 passed
• Repair validation: 50 scripts, 0 blockers
• npm audit --omit=dev: 0 vulnerabilities
• source archive SHA-256: b10aea25f19e1ca3fe278bc0a90688924d2d14a8709ec1f6fe007d3b82df0d0a
• disposable-host gate exited 0; cleanup and empty provider inventory were verified
• exact-head GitHub CI passed: https://github.com/arcabotai/clawfix/actions/runs/30725309323
• Syntax, diff, exact-head, and clean-worktree gates passed

Fresh independent exact-head static review: READY, no findings.

No deployment, merge, npm publication, GitHub release, or production mutation is part of this PR update.

[arcabotai]

Superseded by merged release PR #26, which contains the final repair transaction-safety implementation and release evidence. Do not merge this branch separately.