Divide Phase 1 and complete target lifecycle

[dollspace-gay]

What changed

• Divides Phase 1 execution-core work into nine all-or-nothing, independently goalable slices.
• Adds the verified non-cloneable target-instance lifecycle with immutable adapter, build, owner-attempt, and bounded instance identity.
• Integrates typed prepare, execute, cleanup, and discard transitions with the real Linux CLI path and correlated structured events.
• Records ADR-0006 and updates exact trusted-boundary bindings without growing the TCB.

Why

The design needed an external progress ledger that cannot confuse partial implementation or inline markers with accepted work. P1-B also required one common ownership and reset-confidence contract before additional input-delivery and platform adapters are built.

Validation

• cargo xtask format --check
• cargo fmt --all -- --check
• cargo clippy --all-targets --all-features -- -D warnings
• cargo test --all --locked -- --test-threads=1
• cargo xtask verify --all
• cargo xtask tcb-audit --deny-unregistered --deny-unapproved-growth
• bash scripts/check-docs.sh
• actionlint .github/workflows/*.yml
• Repository-wide forbidden TODO/FIXME scan.