fix: enforce financial warzoom pipeline gates

[Duan-JM]

Summary

• enforce deterministic pre-merge validation for manifest state, source/section hashes, evidence errors, chapter audits, and final audit freshness
• keep fast mode explicit and limit --force to failed audits with a valid audit artifact
• stop tracking generated audit output, make cleanup preserve placeholders, and add Claude delegation plus long-running stop conditions
• add 21 regression tests and a path-scoped GitHub Actions workflow

Verification

• make verify
• CLI exit-code, cleanup, ignore-rule, and workflow YAML probes