Consume canonical typed mdbase outcomes

[callumalpass]

Summary

Adopt canonical typed mdbase outcomes for Connect's local filesystem runtime and hosted provider.

Stacked on #352 and paired with mdbase-rs #72.

• local runtime execution, durable claims, replay and cursors retain typed outcomes;
• scoped mutations validate before reads and hold one serialization gate through authorization and commit;
• hosted CRUD/read/query/resource/definition paths consume typed plans and exact canonical changes;
• provider write sets, projections and feeds validate complete change descriptors rather than infer from result JSON;
• v0.3 serialization is deferred to the protocol boundary;
• post-commit hydration/reclassification and definition result-field inference are removed;
• irreducible legacy hosted receipts fail closed rather than replay an inexact success.

The deployment pin advances to mdbase-rs ad69b1d5ee2849643dc699f1867ae5f5c7e29e9b.

Preserved guarantees

Authentication remains before reads. Runtime prepare/claim/commit/resolve/ack ordering, receipt-before-feed acknowledgement, watcher deduplication, hosted row locks and commit-time reauthorization, query budgets/cursors, encrypted response envelopes and v0.2 compatibility are unchanged.

Verification

• full Rust workspace and strict Clippy
• Node 24.19.0 full package tests and typecheck
• architecture and workspace-pin checks
• hosted disposable PostgreSQL replay/fail-closed scenarios
• exact typed-to-v0.3 envelope and deferred-total fixtures
• independent cross-repository hostile review: ACCEPT

Architecture inventory: 663 production files, 1,375 relative imports, 24 workspace packages, 3,100 Rust public declarations, 2,292 TypeScript exports. Existing SDK size warning remains 58,609 gzip bytes, below the 65,536 hard ceiling.