#28229 carry of #28010: apply cloud machine status transitions safely

Carry of #28010, preserving its CloudService record application and stale-read ordering fix while merging current feat-cmux-next. This branch will repair the dependency-list sorting red before landing.

Original purpose: ensure Machine Status applies pause/resume transitions and ignores stale reads.

Supersedes #28010 for landing; original remains open until the carry is ready.

No capture: behavior-only Cloud record reconciliation; this fix has no visual surface or screenshot to capture.

agent-identity footer --repo manaflow-ai/cmux