fix(dag): enforce execution-location ownership on adoption, recovery, and wake (DAG-LOC-01)

[LeXwDeX]

sibling worktree 同 project id → projectId-only guard 允许错误目录 adopt/recover/wake/spawn（六场景全 RED，含伪造证据取消活 child）。修复：单点 location authority（directory 键 + durable 重验 + Deleted teardown），worktree /private/tmp/oc-dag-loc（review/dag-execution-location），7 探针 Red→Green，切片复审 6 P2 跟进中。PR 待开。

[LeXwDeX]

Paused by maintainer and intentionally excluded from graphagent-v1.0.9.

Current WIP is not merged. Remaining review items:

• execution ownership must distinguish different directories inside one worktree
• terminal teardown and asynchronous negative tests need stronger regression barriers

The issue remains open for a later maintenance pass.

[LeXwDeX]

Merged via PR #266 (fix/dag-loc-ownership @ ab4cddb): single execution-location authority (session-sourced WorkflowTable.directory stamp + durable revalidation), H1 duplicate-adoption latch with mutation-falsifiable probe, 7 async/race probes, CI green. Known limitations pinned for follow-up: SessionMoved wake wedge (needs atomic-DB-adoption redesign), vs-deletion tail, legacy app-side id encoder.