Unblock PostgreSQL cutover journal creation

[azurras]

Summary

• remove obsolete Directory arguments from PostgreSQL migration ACL-helper calls
• enforce declared parameter usage for every migration path-protection call
• recover exact SHA worktree cleanup when Git unregisters before returning a removal failure
• preserve the directory when Git still registers it

Verification

• RED: focused suite reproduced partial worktree cleanup failure, production journal Directory binding failure, and four invalid calls
• GREEN: focused suite 109 passed, 0 failed
• full Windows production ops suite 781 passed, 0 failed, 28 skipped