Adopt verified remote routes without redeploying

[squarepots]

Summary

• treat a verified in-sync preflight audit as completed remote deployment and adopt that state locally instead of mutating the host again
• keep remote deployment limited to a verified service-missing state while the Route is still pending/deploying
• preserve the existing fail-closed behavior for drifted or undetermined remote state
• add regression coverage for the recovery decision and local adoption path

Why

PR #41 made every deployment retry audit first, but still allowed in-sync to continue into performRouteOperation, which could redeploy a Route whose remote mutation had already succeeded. That violates #7 acceptance criterion 3: a local persistence failure after successful remote deployment must recover without redeploying blindly.

Version impact

patch — 2.2.2 → 2.2.3

Closes #7