Persist visible disclosure surface acceptance

[rcs2153]

Summary

• add a durable GovernanceDisclosureSurfaceAccepted workflow event for the selected visible-governance path
• require exact assessment/run/correlation/timestamp identity, idempotency, and duplicate rejection
• project bounded non-claims to audit and cite the durable event from terminal WorkReports
• report CLI success only after persistence
• document implementation, limitations, governed records, and focused review

Guarantee

This proves only that the explicitly injected local surface accepted the exact payload-free disclosure request. It does not prove external delivery, display, human observation, understanding, acknowledgement, or exactly-once external delivery.

Validation

• cargo fmt --all --check
• cargo clippy --workspace --all-targets -- -D warnings
• complete affected Core and CLI test binaries
• cargo test --workspace
• npm run check:docs
• npm run check:integrations
• npm run check
• git diff --check

Governed execution

Implementation: dg/runtime-composition, run run-1786570019444128000-2, proof-enforced approval granted, 39 events.

Review: dg/review, run run-1786582390652533000-2, proof-enforced approval granted, 39 events.

Review verdict: accepted with non-blocking follow-ups.