Add ChatOps surface for SourceOS State Integrity events and repair review

[mdheller]

Purpose

Agent-Term should expose SourceOS State Integrity as a ChatOps/operator surface for agents and humans.

Canonical spec: SourceOS-Linux/sourceos-spec/docs/architecture/sourceos-state-integrity-layer.md
Program tracker: SourceOS-Linux/sourceos-spec#83

ChatOps workflows

• show sync/state health
• explain object state
• list conflicts
• review agent object transactions
• summarize policy blocks
• run repair dry-runs
• route apply actions to explicit approval
• notify on structured state events

Requirements

• Consume structured CLI/daemon output, not raw logs.
• Require explicit target scope for state-changing operations.
• Represent agent-written changes as draft, proposed, applied, or reverted where possible.
• Forward structured events for Sherlock, Holmes, and Lampstand.

Acceptance criteria

• Agent-Term has State Integrity command vocabulary.
• Conflict and repair flows distinguish human-review-required from safe automatic repair.
• Policy denials are explained with actor, object, profile, workspace, and policy rationale.