feat: opt-in coordinated deliverable acceptance

[0YHR0]

Summary

Closes #187. Add opt-in deterministic acceptance for a pinned Coordinated primary
deliverable without changing default Tasks or execution status.

• Required fields, typed equality, unit-aware rates and optional output-claim checks.
• Missing evidence needs review; execution completion never grants configured acceptance.
• Evidence-bound human overrides with permission checks, idempotency and outbox audit integrity.
• Gated accepted-result export, bilingual Console configuration/results, memory-capture guard
  and completion-notification excerpt suppression.
• PostgreSQL0058 audit-action migration; downgrade refuses to discard acceptance audit.
• Bilingual guide and current roadmap/status updates.

Verification

Domain adversarial, API/auth, projection, Console/Node, memory and notification checks.
Full local regression and GitHub PostgreSQL/Compose E2E CI; private live-model acceptance
is recorded separately without committing credentials or private infrastructure addresses.

Boundaries

Checks do not prove arbitrary prose truth, independently audit caller facts, or undo tool
actions already executed. Raw audit results remain readable. Only the configured primary
is covered; supporting attachments are not automatically accepted. Automatic revision and
post-acceptance external publishing are separate follow-ups.

[0YHR0]

Final verification: 2,477 local tests passed, 304 external-service tests skipped; all PR CI checks passed. Private live DeepSeek plus external-memory qualification covered two five-work-item DAGs (7 transfers and6 retrievals each): missing denominator -> NEEDS_REVIEW/export409; typed18/200*100 claim9 -> PASSED/export200. Human acceptance retained UNKNOWN and rejection re-blocked export. Existing prose-only editor output remained unaccepted, as intended; a separately published strict-JSON fixture employee enabled claim verification and was archived afterwards. No secrets/private deployment links committed.