Add retained lane recovery paths

[yvette-carlisle]

Summary

• Adds recover merged-closeout for stale retained-attention lanes after a human PR is already merged and the tracker issue is completed.
• Lets recover review-handoff adopt restore a missing active service label after all other takeover invariants pass, with rollback if audit write fails.
• Stops live status from counting resolved terminal attention history echoes when tracker readback proves the issue is done, unowned, and no retained/post-review/queue owner remains.
• Updates operator docs and Decodex skills for the new recovery paths.

Root Cause

• Review-handoff recovery could validate a manual takeover path but still require hand-added active ownership labels before live adopt.
• Stale retained ledgers had no official closeout reconciliation once a human had already merged the PR and completed Linear, leaving false retained_attention noise.

Validation

• cargo make checks
• git diff --check
• PUB-1549 dry-run: recover merged-closeout PUB-1549 --pr https://github.com/helixbox/pubfi-mono/pull/315 --dry-run validated branch x/pubfi-mono-pub-1549, head 439bfd7a125b74b2f2438082cc4233077e21c577, merge commit 359dc5ac2653f1169969aad7702bd0ec11b8c634.

Fixes XY-947.
Related XY-949.