feat(intelligence): project governed live sources

[eamirian]

Outcome

Adds rebuildable Connection and Source resources to the unified Intelligence resource plane using only successful governed LIVE source admissions.

Boundary

• validates the exact acquisition -> snapshot -> admission chain
• projects stable, versioned Connection and Source identities with exact supersession
• redacts captured payloads, URIs, locators, resolved addresses, and credentials
• degrades partial, orphaned, duplicate, or inconsistent chains without exposing material
• leaves Source Health explicitly unsupported until Core owns real failure and health telemetry
• composes through the existing host-owned reader factory; FastAPI remains transport-only

Verification

• Ruff lint and format: pass
• focused resource-plane, ingress, architecture, and kernel gate: 70 passed, 1 expected integration skip
• repeated capture, restart, redaction, lineage, and fail-closed cases covered

Excluded

No source-health inference, connectors, Atrium UI, domain code, provider implementation, release, or publication.