B05: Partial apply recovery

Classify partial-apply outcomes as failure versus unknown, add an owner-restricted audit ledger recording IDs, classifications, and required discovery context with no credentials, secrets, or environment snapshots, and replan only remaining desired drift with recovery tests for injected GH timeout, permission, local-file, and project-view failures.