feat(observatory): complete evidence-led agent delivery

[jmagar]

Summary

Completes the unraid-mcp-6jfs evidence-fidelity and operator-delivery epic.

• adds canonical Claude, Codex, Gemini, and Antigravity provider descriptors with safe transcript roots and bounded receipt-backed runtime health
• completes authenticated syslog forwarding receipt/recovery coverage and bounded transcript continuation behavior
• prioritizes active transcript files while retaining checkpointed historical backlog drainage
• reads supplemental Codex title metadata and preserves explicit title provenance
• skips over a physical JSONL record larger than the finite 8 MiB parser cap using a deterministic bounded gap record, allowing the checkpoint and later evidence to advance
• self-heals malformed Agent Observatory Git cursor state once and persists the repair
• hardens Agent Observatory source projection so repository observations, OTLP relationships, cursors, and redacted evidence remain durable and provenance-bound
• exposes the implemented Observatory routes through the audited REST surface and documents the exact MCP/action/schema inventory

Verification

• CORTEX_FULL_PRE_PUSH=1 cargo xtask pre-push — passed
  • version and release invariants
  • plugin and skill validation
  • cargo clippy --all-targets --all-features -- -D warnings
  • 2,739 library tests plus CLI and integration suites
• focused AI transcript forwarder suite — 33 passed
• exact commit 695f6245695989275385c04f5d115194be9bbd37 built for macOS and Linux amd64
• exact image deployed to tootie; container and /health are healthy
• macOS launchd agent installed from the same commit; source and installed SHA-256 match
• real 14,938,604-byte Codex transcript advanced to line 386, matching its 386-line EOF, after an over-8-MiB record
• fresh Review Cortex parser session metadata reached tootie with codex.user-assigned provenance
• a second tootie restart emitted no malformed Git cursor warning

Safety notes

OTLP span and metric associations require pre-existing exact provider/session run identity. Untrusted telemetry advances its cursor without creating synthetic run evidence. Oversized transcript content is never retained in memory beyond the fixed parser cap; the gap record contains no source content.