feat: recover from provider log discontinuities

[ZhiXiao-Lin]

Summary

• pin Runtime commit f29e1ef72a2223813700fdf112aa2fa8819fe406 from feat: type permanent log discontinuities Runtime#3 and carry typed cursor_lost/source_disconnected identities through the node protocol
• persist and replay provider-gap batches in the node agent, rebase replacement chunks onto the durable Cloud sequence, and preserve retryable transport failures
• store gap membership atomically in PostgreSQL and merge provider gaps into workload-log pagination and exact API responses
• update architecture, domain model, conformance, roadmap, and operator documentation

Stack

• base: feat: compact workload log tombstones #8
• Runtime prerequisite: feat: type permanent log discontinuities Runtime#3

Validation

• Rust stable contracts: 14 passed
• Rust stable control-plane library: 107 passed, 1 intentional S3-compatible integration ignore
• Rust 1.85 contracts: 14 passed
• Rust 1.85 node log-shipper tests: 7 passed
• Rust stable and 1.85 formatting, workspace all-target Clippy, and rustdoc passed
• repository policy and runtime-conformance helper tests passed
• web typecheck, format, lint, tests (7 passed), and build passed

The local macOS host has no /var/run/docker.sock, so three existing Docker Secret unit tests cannot run here; the Linux CI Docker runner owns the full workspace gate.