[Planning] Implement deterministic, side-effect-free plans #33

Outcome

Separate calculation and authorization from provider execution.

Scope

• Convert authorized desired/observed snapshots into immutable ordered plans, capability checks, quota/cost data, and digests without provider mutation.

Acceptance criteria

• Identical inputs produce the same plan and digest.
• Unsupported dependencies fail before execution.
• Actor, policy version, resource generation, capability, quota, and cost inputs are bound to the plan.

Test and evidence

• Golden, property, and no-side-effect tests.

Dependencies

• Blocked by #31.
• Blocked by #24.
• Blocked by #19.

References

• Architecture overview
• Security model