Fix runtime safety and Console contract regressions

[dotnetpower]

Summary

• expose every allowlisted runtime setting through the read-only local projection with complete English and Korean Console copy
• preserve stable inventory correlation for null inputs and keep exact actionless triage Verdicts out of Thor's ActionRun and resource-claim path
• move analyzer publication claims from the isolated Executor table into the Core-owned state_kv namespace while preserving atomic transitions and fail-fast PostgreSQL configuration
• align focused Console E2E contracts for live audit destinations, inventory progress, production-only panels, exact headings, and verified lazy-iframe cancellation
• refresh the generated question-bank and dependent CQAS source digests required by the catalog changes
• make Cost Governance scheduled-analytics deadline checks deterministic through one injectable UTC clock

Safety

This change adds no ActionType, provider mutation, deployment, promotion, or execution authority. Huginn remains the deterministic Event/Change collector, Forseti remains the judge and Verdict owner, Thor remains the sole privileged executor, and Odin and Saga retain actionless triage evidence. Local Settings materialization remains non-manageable, and Cost Governance keeps current UTC as its production default.

Validation

• focused Python suite: 443 passed
• affected agent and analyzer regression retest: 137 passed
• Cost Governance scheduled analytics: 6 passed
• generated question bank: 8 passed
• generated semantic/CQAS coverage: 4 passed
• System Knowledge catalog: 8 passed
• Console catalog unit tests: 11 passed; TypeScript typecheck passed
• focused Playwright: 152 passed before the exact iframe-cancellation correction; all 24 affected governance tests then passed
• Ruff, format, and strict mypy passed
• catalog parity, translation parity and quality, readable Hangul, punctuation, roadmap tracking, document size, doc links, constitution, design routes, and service-boundary checks passed
• local fdai_core PostgreSQL analyzer claim/release/reclaim passed
• commit hooks and protected pre-push lightweight plus structural gates passed

CI follow-up

The superseded settings-only PR exposed deterministic integration failures. This branch refreshes the catalog-derived question bank and dependent CQAS artifact, removes wall-clock expiry from the Cost Governance tests through the production-safe clock seam, and retains the routed design-context line budget.

Closes #1349
Supersedes #1351

[dotnetpower]

Superseded by #1351, which isolates the validated runtime Settings change from unrelated concurrent commits that landed on the original head branch.