Golden actor: receipt-driven mesh provisioning lifecycle

[svelderrainruiz]

Parent epic: #442

Problem

Repeated local mesh/golden provisioning is expensive and can obscure whether an actor was rebuilt, refreshed, or merely verified.

Deliverable

Ship a receipt-driven local lifecycle that:

• validates public topology and provisioning inputs;
• provides plan, verify, apply, and explicit replace modes;
• produces tamper-evident non-secret receipts;
• refreshes safe implementation drift without destroying actor disks;
• provides an efficient handoff for subsequent agents.

Acceptance

• A fresh replacement creates a valid receipt.
• A no-change apply verifies existing actors without invoking Vagrant destroy/up/provision.
• Receipt validation fails closed on digest or input drift.
• The workflow is documented and test evidence is included in the PR.