fix: refresh private report history within one bounded run

[vincentkoc]

Problem and change

Unchanged or empty Discord channels can retain stale observed checkpoints without proving a complete report window. The publisher now performs the normal guild-wide latest refresh, followed by the native bounded full/since scan for a pinned private selector policy, within one shared 1,200-second acquisition budget.

The policy is fetched from an isolated private ref and verified by exact commit, content hash, schema, configured guild, and bounded target set before restoring state. Both acquisition phases use the existing native collector. Failed acquisition preserves committed progress in the full private checkpoint only after the task-owned process group has been reaped; it does not publish the archive.

This also removes cloud export/upload from this publisher and temporarily removes schedules. Manual dispatch remains available. Recurring publication and cadence will be restored only after a measured full-size private checkpoint and acquisition run; this source change does not claim operational recovery or complete source coverage.

Validation

• 48 Python checkpoint, policy, supervision, and diagnostic tests passed.
• Three Go publication/workflow fixture files passed under Go 1.27.2.
• The integrated helper retains the reviewed diagnostic command/reaping owners and acquisition owners without semantic changes.
• Independent source and composition reviews passed; scoped P3 review reported no findings.
• Strict UTC windows below 48 hours, retained text/forum children, invalid parent rejection, shared deadline, descendant cleanup, and failed-progress save/publication gating are covered.
• All 18 exact-head hosted checks passed, including the 12-job CI run on attempt 1, Docker, CodeQL, and secret scanning.
• Diff checks passed. No schema, credential, or live workflow configuration changes.

The branch includes the already-landed checkpoint diagnostics from #288. Full-size checkpoint recovery and the first measured acquisition remain separately gated.

[clawsweeper]

🦞👀
ClawSweeper picked this up.

Pull request received. I will update this pull request when review starts.