Complete declarative CRM workflows and governed assistant integration

[Maneek21]

CRM work now runs through declarative Contacts records and the generic host: contacts, companies, deals, activities and outreach connect to native tasks, canonical navigation, reviewed App actions and durable receipts. The change includes paginated views, session-safe caches, import/merge/archive recovery, source-grounded Defty continuation, portable author packaging and an operator guide.

Contacts1.8.0 provenance is pinned to source PR1, commit8b59041f. Current-master documentation and workflow changes are preserved. The final CI repairs restore bulk-create write-scope discovery, use the closed provider-input registry, correct stale fixtures and execute the three CRM authorization suites previously skipped by CI database naming.

Validation at commit9e1618d1:

• CI and security pass: types/lint/provenance, API, build, production image/browser smoke, versioned upgrade, CodeQL and dependency checks.
• API:1,448 passed,0 failed,7 explicit alternate-mode/certification skips. Six concern the opt-in legacy-MCP cutover mode; one ancestry certification test requires a Phase5-named database. Hermes certification is excluded by the declared core release scope.
• All61 scoped acceptance gates closed, including independent desktop/mobile operator persistence, actual Defty/Codex flows, generic Module portability, sandbox failure/unknown receipts, and exact restore/preservation checks.
• Hosted candidate is treee3cd40c7/image5d8e1cd. Public readiness, corresponding source, archive hash and image agree.148-table/upload preservation manifests match; no schema migration was needed.

The frozen116-deal/102-task workload passes. Slow full reloads (board1.8–2.4s; task links4.0–6.2s) and one warm task-view miss remain documented; this is not a production SLA. No real email was sent. Temporary grants and diagnostic processes are removed; fixture receipts/backups are retained.

Ready for review. Do not merge as part of this task.