Fence VM receiver lifecycle transitions

Closed
TE
1d ago
+1493-611

Adds a VM-self-only receiver lifecycle API. Generation checks reject stale transitions and preserve terminal state on retries; state and audit commit together. Generated clients support it, and the TypeScript transport follows each operation’s replay policy.

Hosted backend verification passed 1,139 API cases, six transport cases, typecheck, catalog, database and build checks at a8db32c61b1. Rust verification passed both wire cases, Linux lint and MSRV; macOS remains queued.

Signed-token and guest wiring remain before this fences receiver restarts.

Changelog

none