fix: preserve proxy recovery after rollback failure

[kev1n77]

Summary

• keep the recovery journal armed when proxy apply and synchronous rollback both fail
• trigger and await the independent watchdog recovery path instead of deleting recovery evidence
• preserve the journal and return all three errors if watchdog recovery also fails
• add PAC-state fault injection through a real watchdog child process
• update TST-003 progress

Verification

• cargo test -p codeischeap-proxy-recovery --all-targets (8 passed, 1 ignored real WinINet test)
• cargo clippy -p codeischeap-proxy-recovery --all-targets -- -D warnings
• cargo fmt --all -- --check
• git diff --check

Local environment note

Full workspace test and Clippy builds are blocked locally because vendored OpenSSL cannot find Perl; CI provides the authoritative cross-platform workspace checks.