Implement Aru epistemic review lifecycle

[dcmcshan]

Summary

• introduces typed epistemic objects, source dependencies, uncertainty, prohibited claims, retention classes, and transformation warrants
• changes end-of-day finalization into a two-phase review flow
• adds deterministic constitutional checks and blocks unsupported or non-compliant approval
• adds a local steward workspace at /review/
• publishes only after human approval, then writes a review attestation and verified burn receipt
• updates the charter, architecture documentation, installer, systemd state paths, packaging, and offline audit

Verification

• python scripts/test-processor-contract.py
• python scripts/test-daily-batch-hypothesis.py --no-write
• python scripts/simulate-community.py --no-write
• ./scripts/audit-standalone.sh
• git diff --check

All checks pass. The browser layout was structurally validated, but headless screenshot generation was unavailable because the environment could not download a Playwright browser binary.