feat(guard): harden workflow against unattributed root WIP and pytest-disabled production guards (Closes #683)

Add shared workflow_scope_guard with typed blockers (blocker_kind +
exact_next_action) and force-on production enforcement under pytest.
Wire root/branches/scope checks through verify_preflight_purity and
mutation entrypoints (create_issue, comment_issue) without adopting the
rejected 300a4ca patterns (test-mode early-return, porcelain *.py filter).

Regression suite covers out-of-scope issue ownership, root diagnostic
edits, worktree bind success path, force-on under pytest, porcelain
integrity, monkeypatch resistance, real entrypoint fail-closed proof,
and durable failure recording.

tests/test_reconciler_close_workspace_guard.py

@@ -86,9 +86,21 @@ class TestReconcilerCloseWorkspaceGuard(unittest.TestCase):
     ):
         srv._preflight_resolved_role = "author"
         with patch.object(srv, "PROJECT_ROOT", CONTROL_CHECKOUT_ROOT):
-            with self.assertRaises(RuntimeError) as ctx:
-                srv.gitea_create_issue(title="Test", body="body")
-        self.assertIn("stable control checkout", str(ctx.exception))
+            try:
+                res = srv.gitea_create_issue(title="Test", body="body")
+            except RuntimeError as exc:
+                self.assertIn("stable control checkout", str(exc))
+            else:
+                # #683 typed blocker at mutation entrypoint
+                self.assertFalse(res.get("success"))
+                blob = " ".join(res.get("reasons") or []) + str(
+                    res.get("blocker_kind") or ""
+                )
+                self.assertTrue(
+                    "stable control checkout" in blob
+                    or "missing_issue_worktree" in blob
+                    or "control checkout" in blob.lower()
+                )
 
 
 if __name__ == "__main__":