fix(automation): enforce durable alert closure

Restore D037 durable incident readback without weakening database failure semantics.

Fence Agent99 dispatch and terminal learning to canonical identities, durable leases, verifier receipts, and reconciler-owned checkpoints.

Drain backup and restore legacy receipts in bounded cohorts with strict transport, claim, projection, and no-false-green controls.

Keep SSH service refusal visible while separating it from broker network-policy reachability.

agent99.config.example.json

@@ -136,6 +136,11 @@
     "batchLimit": 5,
     "retryAfterMinutes": 5
   },
+  "outcomeWriteback": {
+    "enabled": true,
+    "url": "https://awoooi.wooo.work/api/v1/webhooks/agent99/outcomes",
+    "tokenEnv": "AGENT99_SRE_RELAY_TOKEN"
+  },
   "telegram": {
     "enabled": true,
     "botTokenEnv": "AGENT99_TELEGRAM_BOT_TOKEN",
@@ -260,6 +265,9 @@
   },
   "backupHealth": {
     "host": "192.168.0.110",
+    "protectionMetricsPath": "/home/wooo/node_exporter_textfiles/backup_health.prom",
+    "protectionReadTimeoutSeconds": 45,
+    "protectionMaxAgeMinutes": 60,
     "targets": [],
     "fileChecks": [],
     "cronPatterns": []