fix: close promotion review and foundation gates

[BeforeLights]

Summary

• apply the valid findings from the single CodeRabbit review on promotion PR promote: dev history slice 1 of 4 #29 and record every accepted/rejected disposition
• close FND-003 with live Docker/Compose health, bootstrap, restart, persistence, collision, disk-pressure, and safe-stop evidence
• close FND-004 with pinned OpenTofu 1.12.5, locked AWS provider 6.0.0, official formatting/validation, and a credential-free mocked alpha plan

Verification

• corepack pnpm repo:check
• corepack pnpm repo:build
• corepack pnpm infra:validate
• live local infrastructure start/restart/persistence/schema/bootstrap/failure-path/stop matrix
• clean worktree and 31 commits over origin/dev

Review policy

This PR targets dev and must not invoke CodeRabbit. The later ordered dev to main promotion PR receives the single full CodeRabbit review.

[coderabbitai]

Important

Review skipped

Auto reviews are disabled on base/target branches other than the default branch.

Please check the settings in the CodeRabbit UI or the .coderabbit.yaml file in this repository. To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: defaults

Review profile: CHILL

Plan: Pro Plus

Run ID: 9a04008b-2b95-4ba9-9690-9ce1941da389

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

---

_{Comment @coderabbitai help to get the list of available commands.}