feat(kanban): close Card-to-Run execution loop

[cnjack]

Summary

• add durable jtype Card transition occurrences, permanent claims, cursor/bootstrap handling, and atomic Run attachment
• write idempotent accepted/blocked/suppression/terminal receipts and preserve frozen writeback across configuration drift
• embed policy health and paginated Cloud execution history in Card detail through feat(board): add Card detail supplement slot jtype#64
• surface Card/Run deletion and transient dependency failures instead of silently stalling

Depends on cnjack/jtype#64.

Verification

• cd orchestrator && go test ./...
• JCLOUD_PG_DSN=postgres://... go test ./internal/store -count=1
• cd console && pnpm test (69 files, 580 tests)
• cd console && pnpm typecheck
• Kimi adversarial re-review: no findings
• Grok P0/P1 findings fixed and re-reviewed

Review notes

• jtype Card remains Work Item truth; Cloud Run remains execution truth
• automation_id + document_id is the permanent claim; leave/re-enter creates a new occurrence only after terminal writeback
• jtype editedBy is display-only and never authorizes a Run

Relates to #14

[coderabbitai]

Important

Review skipped

Auto reviews are disabled on base/target branches other than the default branch.

Please check the settings in the CodeRabbit UI or the .coderabbit.yaml file in this repository. To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: defaults

Review profile: CHILL

Plan: Pro Plus

Run ID: 1dc48c87-70b4-464a-a0b6-1252aaf1f164

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}