Move deterministic finalization from Codex into Code Converge

[dapi]

Summary

Move deterministic publication and CI orchestration from Codex into Code Converge. Review, findings remediation, and CI diagnosis remain Codex-backed.

Changes

• Added accepted ADR-002 and the FT-039 feature package.
• Removed the Codex Finalize stage and obsolete finalize configuration.
• Added host-owned checkpoint, direct-ref push, pull-request discovery/creation, and exact-head CI polling.
• Added configurable CI timeout with a 60-minute default, retry/cancellation handling, explicit timeout events, and CI recovery transitions.
• Added repository, workflow, configuration, event, linked-worktree, migration, and provider-behavior tests.

Verification

• go test -exec /usr/bin/true ./... (all packages compile; test execution is unavailable in this macOS sandbox because generated test binaries abort with missing LC_UUID load command)
• go vet ./...
• make docs-lint
• git diff --check

Closes#39