feat: connect adaptive surfaces to governed live AOS actions

Outcome

Connect adaptive surfaces and Rhai recipes to live AOS capabilities so user actions are governed, attributable, cancellable, and auditable.

Scope and ownership

Surface action descriptors, principal binding, confirmation and consent, capability lookup, invocation, progress, cancellation, receipts, and failure recovery. Presentation labels and script names remain non-authoritative.

Dependencies

• Live read-only observation bridge.
• Rhai capsule.
• Astrid Surface Model action bindings.
• Required generic Astrid substrate outcomes.

Exit gate

Allowed actions execute through the live principal and produce correlated progress and receipts; denied, stale, replayed, cross-principal, widened, expired, and cancelled actions fail closed; reconnect never repeats an effect silently.

Claim boundary

This does not grant ambient desktop control or treat generated UI as permission.

Verification

Adversarial action corpus, consent flows, cancellation races, at-most-once/reconciliation tests, audit correlation, and multi-principal isolation.