Freeze CK-07R1 lifecycle planner/recovery path authority

[douglasmonsky]

What changed

• Add CK-07R1A0 Authority v1 and strict schema for the reachable recovery, planner, APPEND_SAFE_SMALL, pointer-writer, oracle, and postcondition path.
• Preserve all prior CK-07R1 attempt identities, timestamps, failure causes, exact scope-file digests, and writer-only receipt evidence.
• Reconcile roadmap/DAG/ledger status while keeping CK-07R1 BLOCKED; bind only the two retained lifecycle scope additions.

Why

The retained all-profile receipt manually forced APPEND_SAFE_SMALL and called the writer directly, so it was not publication-valid planner/recovery evidence. This packet freezes the authority needed for a future successor without implementing or running qualification.

Validation

• Focused authority/scope/DAG/schema suite: 28 passed.
• just v: 1365 tests passed, 13 invariants tests passed, pyright, release checks, console checks, Ruff, and mypy passed.
• GitNexus detect_changes: low risk, no affected processes.
• No production qualification run was executed.