Add disabled private original intake and delivery pilot
Default-disabled GET/POST/OPTIONS original pilot with existing verified store/reconcile/readback, strict workspace metadata/auth and4MiB raw PDF/CSV/private binary delivery. No environment activation or customer operations.
Validation:163 originals/route fixtures pass, including seven integrated lifecycle cases keeping shared API-key/Bearer-key auth and domain/storage/RPC adapters real against synthetic backend. Covers module-reset readback, committed lost acknowledgment and no-upload recovery, unknown credentials, revoked workspace scope and withdrawal during download. Installed SDK synthetic HTTP verifies scoped private download URL/service headers/deadline. Full lint/scoped TypeScript/format/diff pass. Backend transaction/access/admission behavior is simulated; this is not hosted integration or limiter proof.
Dependencies separately unapproved. Refresh included commits after releases. Distributed concurrency, retained storage/orphan lifecycle, explicit legacy recovery and hosted complete authenticated roundtrip remain activation gates. No signed capabilities/MCP/provider/financial/rights action.