Harden Agent Harness workflows and observability

[TerminallyLazy]

Summary

• make Pro a structured single-agent workflow and Ultra a bounded 1-4 worker task-graph workflow
• add action-bound, single-use approvals and fail-closed verification gates
• constrain uploads, artifacts, workspaces, and memory proposals
• move lifecycle setup and cleanup to hooks.py and remove obsolete import scripts
• add a right-side observability canvas with responsive, theme-native controls
• add publication metadata, CI, licensing, and contract coverage

Verification

• 28/28 tests passed in the Agent Zero framework runtime
• JavaScript syntax checks passed for the Harness store and surface registration
• git diff checks passed
• a live Pro lifecycle and right-side canvas were verified at localhost:55000

No Agent Zero core files are modified.

Issue #1 remains open because the divergent-checkout failure happens in the Agent Zero updater before a new plugin hooks.py can load. The README documents the safe recovery path.

Closes #2