feat(validation): prove hosted Notepad++ lifecycle

[Artexis10]

What changed

• adds the proof-grade hosted-live lifecycle runner for Notepad++: install, verify, seed, capture, mutate, restore, rebuild, revert, final uninstall, cleanup, and typed evidence persistence
• binds runtime authority to the authenticated GitHub campaign, exact engine/tool identities, mutation permits, restore targets, and inspected store identities
• decodes real production capture and restore output while rejecting foreign, duplicate, aliased, or invalid paths
• removes the unreliable command-exists: notepad++ verifier; exact Winget verification plus the independent hosted observer remain the installed-state proof
• adds hermetic full-journey and failure-at-every-phase coverage, including cleanup and evidence behavior

Why

The verified module matrix proves module contracts, but it did not yet exercise the complete engine lifecycle with production-shaped output and mutation authority. This slice builds that constrained engine proof before exposing it through GitHub-hosted CI.

Two review findings were fixed before publication: production capture emits configs/notepad-plus-plus/..., not comparator apps/... paths, and a standard Winget Notepad++ install does not reliably expose a notepad++ PATH command.

Impact

This substantially hardens the engine-side contract and makes failures deterministic and attributable. It does not claim a real GitHub-hosted Notepad++ run yet; the dedicated runner capability probe and hosted workflow are follow-up commits.

This PR is intentionally stacked on #205 (docs/verified-module-matrix).

Verification

• go test ./internal/commands -run 'Validation' -count=1 -timeout 10m
• go test ./internal/validationharness ./internal/configrestore ./internal/validationmatrix ./internal/modules -count=1 -timeout 10m
• go vet ./...
• native builds of endstate and endstate-validation
• Linux/amd64 cross-builds of both binaries
• independent reviewer: no Critical or Important findings
• independent verifier: committed snapshot b695e4b verified; no tracked worktree drift