fix: separate protocol freeze from registry lifecycle

[lipluscodex]

Closes #97

real-task-feedback-shadow-v3でresult-free protocol freezeと将来のregistry lifecycleを分離しました。
snapshot付きexact verifierとrepository-only lifecycle auditを分け、同一frozen manifestでempty→packet/correction→one-time final aggregateを検証します。
v1/v2 artifactはbyte不変で保持し、Optional MCP CIへv3 probeを追加しました。

[lipluscodex]

Self-review: changes requested.

[P1] The frozen CI surface does not audit the real registered output paths. Every audit_repository_lifecycle test call passes a temporary registered_root, and the CLI test also points --registered-root at a temporary directory. The workflow only runs that test module. A later observation PR can therefore add malformed files under artifacts/real-task-feedback-shadow-v3/ while CI continues to validate only synthetic temporary states. Wire the frozen test or CI to run the manifest audit against the repository's actual registered paths, with assertions that remain valid for empty, packet, correction, and final stages.

[P1] The snapshot-free audit does not enforce all batch invariants that are available from packet bytes. It binds aggregate config/search surface only to effective[0], and before the aggregate it does not require every effective packet to share the same snapshot hash, capture effective config, search surface, or strictly increasing capture time. A divergent later slot can pass repository audit even though v2 cumulative replay would reject it. Enforce these common-input/order invariants across the effective registry and add tamper coverage.

These are pre-observation v3 fixes. Keep v1/v2 byte-invariant and update the v3 frozen hashes before any real capture.

[lipluscodex]

Self-review: PASS

Acceptance criteria:

• real-task-feedback-shadow-v3はv2と別のprotocol ID / registered pathを使用し、v1/v2 frozen artifactはremote main基準でbyte不変。
• 同一frozen manifest/testでempty、packet/correction、one-time final aggregateを検証し、観測後のmanifest/test変更を要求しない。
• snapshot必須exact replayとsnapshot-free repository lifecycle auditの責務を分離。
• 実registered pathを毎回CIでauditし、canonical JSON、slot/correction chain、共通snapshot/config/search surface、strict capture time、one-time aggregate bindingをfail closedで検証。
• placeholder-only fixture/tamper coverage、clean core 227件、Optional MCP 27件、demo/eval smoke、remote CI 2 jobがgreen。

Scope deviations: なし。Issue #95 / PR #96のquery、trace、snapshot、outcome、packetは移送・再利用していない。

Next step: auto modeのためmergeable stateを再確認し、squash merge後にIssue #89をv3へ明示移行して新しいeligible taskから観測を再開する。