Release v3.0.0 approval lifecycle hardening

[renezander030]

Enforce the v3 approval lifecycle across original and edited actions, refused requests, and provider recovery.

• Validate effective payloads against trusted schema bytes and bind every decision to its exact policy evaluation.
• Require one-time consumption, causal timestamps, exclusive expiry, and complete quorum over one effective action before invocation.
• Preserve structured refusal paths and linked retry/reconciliation history with stable identities and fixed attempt ceilings.
• Verify typed audit witnesses and reject ambiguous JSON and invalid JSON Patch operations.
• Add edited, rejected, expired, and recovered lifecycle examples, portable conformance vectors, migration guidance, and v3 n8n endpoint contracts.

Validation: 38 unittest tests; 18 positive and 55 negative portable conformance vectors; deterministic example regeneration; clean diff checks. GitHub Actions runs the pinned dependency install, regeneration check, and complete test suite.

Review notes: based on main at 5f03eab; changes cover schemas, validator, examples, corpus, and documentation. Version 3 adds required policy and authority-expiry bindings; historical v2 records retain their original schemas. No overlapping open PRs were present at branch creation.