feat(delivery): add Standard Code truth gate

[Qiyuanqiii]

Summary

• Add immutable standard_code_delivery.v1 receipts in schema v137, bound to the exact Run, Mission, Session, source Workspace, Drydock, base/head identity, permission revision, backend generation, final Checkpoint, and verification Jobs.
• Derive passed|failed|partial|not_run|blocked|stale only from current runtime evidence, including real committed/index/worktree/untracked/conflict Diff state, bounded output Artifacts, retries, uncovered items, and explicit failure reasons.
• Project the same validated receipt through CLI, HTTP/OpenAPI, Desktop Code, Code Handoff, GitHub Review, and the final Standard Code response; expose navigable file, Artifact, Checkpoint, Undo/Rewind, and Fork links.
• Redact secret-shaped content and private absolute host paths while preserving content hashes and provenance. Drydock/worktree remains an ownership and recovery mechanism, not an isolation claim, and this change does not auto-commit, push, merge, overwrite, or delete workspace files.

Closes #139.

Validation

• go test -timeout 60m -count=1 ./...
• go vet ./...
• CI race subset for Workspace Access, execution permission, permission drift, schema v126, reviewed edit CAS, and fenced command runtime
• go test -count=1 ./internal/domain
• Windows Desktop control-plane and desktop,wv2runtime.error boundary suites
• npm test -- --run (73 files / 351 tests)
• npm run typecheck
• npm run build
• npm audit --audit-level=high
• OpenAPI, generated TypeScript schema, clean-install baseline, protocol registry, and Surface inventory determinism checks

Surface governance

• No Surface is added, promoted, downgraded, deprecated, or removed.

The receipt is projected into already-registered Desktop, CLI, HTTP, Code Handoff, GitHub Review, and final-response surfaces. It adds no renderer, Agent, or remote authority; all writers and readers remain Go-owned and existing tier classifications are unchanged.

Audit

• No credentials or local runtime data are included.
• Policy, workspace, sandbox, and persistence boundaries were reviewed.
• README.md and project memory were updated.