feat(effects): add resource-controlled trusted writes

[heggria]

Summary

• reuse the existing resources authority, PathRef resolver, persistent leases, durable journal, and mutation permits as the single Trusted Effects control plane
• enforce admitted declared fs.write targets with commit-or-restore transactions, crash recovery, overlap admission, direct-write restoration, and ledger-backed why-effect
• close EffectIR validation and enforce transitive confidentiality/integrity labels across schema, verifier, compiler, and runtime
• route phase fast paths through effects admission and preserve imperative/event-kernel semantic consistency

Proven locally on the clean candidate

• focused effects/resources/FlowIR suite: 82/82
• monorepo typecheck: PASS
• full unit suite: 2181/2181
• full build: PASS
• built Codex MCP comprehensive E2E: 16/16
• live Codex A-to-B-to-C E2E: PASS, including declared fs.write and durable authority readback

Scope boundary

This candidate guarantees admitted declared filesystem write targets. It does not claim a full FileBroker/native sandbox and cannot prevent undeclared-path writes by a host process. Secret/service effect backends remain fail-closed and unsupported in the 0.3 MVP.

Release state

Draft for exact-SHA CI. No tag or npm publish has been performed; L5 release and L6 GA remain blocked on explicit human authorization and release evidence.

[heggria]

Superseded by #122 (rc: 0.3.0 Trusted Effects candidate) — head rc/0.3.0-trusted-effects @ 0f9cf16, base main. This draft's head (8778b2f on codex/0.3.0-trusted-effects-candidate) is an earlier candidate; closing this one to keep the exact-SHA CI story on a single PR. No merge, no publish.