feat: close external GC1 consumer journey

[eamirian]

What changed

• makes the external verifier compatible with the public CLI progress-line + JSON receipt shape
• uses an explicitly distinct post-retirement request so automatic idempotent replay cannot satisfy the failure-control gate
• archives the exact completed prepare/restart/resume receipt and reconciles Market's README and roadmap

Public proof

• ACE Core: public ace-core==0.4.4, tag v0.4.4, commit ca7ee1f
• clean database: schema v0 → v176
• real API process restart over unchanged durable state
• exact revision/head hashes recovered
• attributed use before and after restart
• human-authorized retirement
• distinct later required use rejected with cognition_use_attribution_incomplete

Verification

• 133 passed, 1 expected skip in a clean CI-equivalent environment
• 7 focused external-consumer tests passed
• Ruff lint and formatting passed
• archived receipt SHA-256: b239b314b34c3dfedddb72907b63abe5bf3197013b8d1460466ff4942f714682

Core owns the separate GC1 outcome-state reconciliation.