feat(ai): settle proven Codex interrupts

[first-assist]

Summary

• make retained Codex interrupt settlement reachable only with exact provider acknowledgement, version-observed discard evidence, and no unresolved or post-interrupt dynamic tool call
• independently re-prove in one ORM transaction that the cancelled run persisted no assistant output, tool call, or checkpoint before advancing the retained transcript watermark and fingerprint
• preserve the existing interrupt-count API while adding proof-carrying settlement and fail-closed cleanup APIs
• bump graphql-orm-ai to 0.83.0 and AI schema module to 0.62.0 as a semantic-only persistent contract change; there is no DDL, backfill, or row rewrite

Any missing proof still invalidates the retained binding. The Codex discard behavior is version-observed for codex-cli 0.148.0 / gpt-5.4 and must be revalidated before an upgrade.

Verification

• combined seven-provider suite: 364 passed, 3 environment-gated ignored; integrations and doctests passed
• focused Codex interrupt and real SQLite cancel → settle → same-thread resume regressions
• warnings-denied production-library Clippy with no dependency linting
• warnings- and missing-docs-denied Rustdoc
• PascalCase GraphQL test and Rustdoc lane
• PostgreSQL and MSSQL Codex compile lanes
• disposable PostgreSQL parity: 1/1
• release/package policy, SemVer, release state and deterministic release manifest
• documentation (187 governed files), inventory, dependency boundaries, formatting and diff validation

Two pre-existing full-target Clippy warnings outside this diff remain in graphql-orm-macros/src/operations.rs:4870 and the Codex test at codex_app_server.rs:6352.

Documentation impact

• Documentation updated
• No documentation impact

Explanation: CHANGELOG, migration guidance, README, session reliability adoption guidance, schema-module expectations and workspace inventory were updated.