New module webfeed (library + thin shell): snapshot over real on-disk
sources (task checkpoint, event journal, commands store) — absent/corrupt
render available:false + reason, never fabricated; every item carries a
resolvable evidence link; committed/pending on everything; paired-command
ordering by authenticated arrival (unpaired/replayed render as refusals);
GET-only (mutating methods 405 read_only on every route); SSE replay +
live-tail handling BOTH envelope generations in the journal (id/type and
event_id/event_type — silent under-reporting otherwise). Red-first;
race-clean. Main-session verify: green own run.
