fix(hive-c0re): close review findings on the job-DAG queue

- deploy-window gate (meta::exclusive) + path-limited meta commits:
  a perm/lock/topology commit can no longer sweep an ApprovalDeploy's
  staged flake.lock and neuter abort_deploy (regression test included)
- cancel surfaces now buffer terminal roll-ups the scheduler drains,
  so a queued approval DAG cancelled by the operator resolves its
  approval instead of dangling, and cancelled power ops revert their
  wanted flip to the observed state
- hivectl restart / restart-all ride the queue (lease serialization,
  transient guard) and restart sets wanted=Up like the old kill+start
- exactly one Rebuilt event per rebuild DAG, emitted at terminal
- StopForUpdate pre-seeds a missing agent_power row from the pre-stop
  observation so a rebuild can't strand an unknown agent offline
- history trim keeps terminal fan-out parents with live children
- audit_log back on db::open; swarm.js badge for reconcile DAGs

hive-c0re/src/job_queue/templates.rs

@@ -6,7 +6,7 @@
 //! ```text
 //! rebuild(a):        Prebuild(a) → StopForUpdate(a) → Swap(a) →(any) Reconcile(a)
 //! graceful-stop(a):  [wanted=Offline]  Signal(a) → Drain(a) → Reconcile(a)
-//! restart(a):        StopForUpdate(a) → Reconcile(a)      (wanted unchanged)
+//! restart(a):        [wanted=Up]       StopForUpdate(a) → Reconcile(a)
 //! start(a):          [wanted=Up]       Reconcile(a)
 //! stop(a):           [wanted=Offline]  Reconcile(a)
 //! spawn(a):          [wanted=Up]  Create(a) → WriteDropin(a) → Reconcile(a)
@@ -141,8 +141,9 @@ pub fn graceful_stop(agent: &str, source: Source, reason: String) -> DagSpec {
     }
 }
 
-/// Restart: mechanical stop, then converge back to `wanted`
-/// (unchanged) — a stop + start for a wanted-up agent.
+/// Restart: mechanical stop, then converge to `wanted` — the submit
+/// layer writes `wanted = Up` first, so this is a stop + start like
+/// the old `lifecycle::restart` regardless of prior intent drift.
 pub fn restart(agent: &str, source: Source, reason: String) -> DagSpec {
     DagSpec {
         template: Template::Restart,