Require acceptance evidence before workflow closeout

[shaug]

TL;DR

Prevents ticket and epic workflows from treating merged code, green gates, or closed tracker state as acceptance without current criterion-specific evidence.

Summary

• Add criterion-specific acceptance ledgers that bind each required verification item to its category, authored evidence source, pre- or post-merge stage, exact candidate or deployment identity, environment or URL, and pass/fail/missing status.
• Keep delivery state separate from acceptance state so merged candidates with pending post-merge evidence remain blocked and recoverable without being reported complete.
• Require caller-observed tracker state and consumed authority for delegated merged results, with distinct authority for manual updates and automatic closing syntax.
• Revalidate child and parent acceptance during epic closeout, refresh the live graph after every verified delivery or tracker transition, and preserve proportional escape-recovery behavior.
• Extend the result-blind corpus with missing, stale, wrong-source, wrong-identity, unavailable-browser, visual-layout, authority-boundary, and merged-but-blocked graph-refresh cases.

Acceptance state

The branch has passed the repository-required gates and a clean exact-head review at 60aa3c419988ed7b1c353261f48460f887dc0a02. Issue completion still requires merge, current-main representation, post-merge verification, and manual tracker closure after that evidence is read back.

Non-goals

• No Atelier integration or migration.
• No compatibility layer for the unused delegated v1 contract.
• No expansion of browser, deployment, visual, or integration gates beyond ticket-authored requirements.

Tickets

Refs #65