#4074 refactor(daemon): collocate ordered durable-resource teardown

Summary

Make ordinary close and resource teardown consume one ordered list of recording, app-log, audio, perf and snapshot-helper stops. Each caller retains its failure isolation and lifecycle finalization; shutdown retains its separately settled app-log fence.

Three files changed. Four leaf helpers became private after their external consumers disappeared. Closes #4048; part of #4045.

Validation

Head: 3e95993a24c79fc72bfc66694a4c15e1359d0758 (base 144bd59890).

• Independent Terra review found no required findings at the extraction commit. The worker reported 159 files / 1,119 focused tests and 14 ownership tests passing.
• The first exact-head run at 3cc7c2b93a passed format, lint, typecheck and layering, then correctly rejected four unused exports. They are private at this head. The corrected exact gate passes Fallow and build, then fails related tests (1,552 passed, two 5-second timeouts: recording and startup-sweep) and reports a surviving command group. Receipt: .tmp/validation/run-wvcutV/receipt.json, exactCommit: true.
• Worker mutation trials ran in the implementation checkout and are excluded as proof. Existing tests exercise order and continuation; no compliant isolated mutation proof is claimed.
• Draft: timeout attribution, remaining unit validation and live close/shutdown ordering evidence remain. Fixtures do not establish native cleanup. CI coverage, device and replay obligations remain.