feat: repair job, evidence verification, queue backpressure and replay tests

[hardcordev]

Summary

Adds four focused, opt-in building blocks for operational resilience. Each is a self-contained vertical slice with its own tests and operator documentation; no existing runtime behavior, schema or API contract is changed.

Changes

• src/common/repair/repair-job.ts: resumable, checkpointed repair job for orphaned and inconsistent records (dry run, per-record retries, resume from last cursor, before-image journal, resumable rollback, permission check, same-job concurrency guard).
• src/common/evidence/evidence-verifier.ts: Ed25519 verification of imported external evidence (canonical payload digest, signed envelope, per-key issuer/type binding, validity windows, revocation by issuance time, freshness, import permission, idempotent retry and id-reuse conflict detection).
• src/common/backpressure/bounded-work-queue.ts: bounded queue with a concurrency ceiling, FIFO waiting room, 429 with Retry-After when full, per-actor fairness, permission check and retry with backoff.
• src/testing/concurrency/deterministic-replay.ts: deterministic schedule replay, exhaustive interleaving exploration and seeded runs; spec covers concurrent writes, stale-version retries, duplicate idempotency keys and unauthorized writers using the real OptimisticConcurrencyService.
• Specs for each module, docs (docs/REPAIR_JOB.md, docs/EVIDENCE_VERIFICATION.md, docs/BOUNDED_QUEUE_BACKPRESSURE.md, docs/DETERMINISTIC_REPLAY.md) covering edge cases and recovery/rollback, and README links.

Issues

Resolves #266
Resolves #265
Resolves #263
Resolves #262

Verification

Manual code review only. cargo build and cargo test were not run (this is a TypeScript repository), and no other build, lint or test command was run, so the new specs have not been executed.

[drips-wave]

@hardcordev Great news! 🎉 Based on an automated assessment of this PR, the linked Wave issue(s) no longer count against your application limits.

You can now already apply to more issues while waiting for a review of this PR. Keep up the great work! 🚀

Learn more about application limits

[github-actions]

Code Review & Auto-Merge — @dorismaduegbunam 🚀

Thank you @hardcordev for your contribution!

• PR Title: feat: repair job, evidence verification, queue backpressure and replay tests
• Author: @hardcordev
• Branch: feat/resilience-slice -> main
• Linked Issues: Closes Trellis-API: Build a resumable repair job for orphaned and inconsistent records #266, Closes Trellis-API: Add cryptographic verification for imported external evidence #265, Closes Trellis-API: Implement bounded queue backpressure for expensive background work #263, Closes Trellis-API: Add deterministic replay tests for concurrent writes and retries #262
• Status: Approved & Merged into main.

Verified code changes and repository requirements. Merging pull request.