Replace durable-stream attachment polling with lifecycle recovery

[vigoo]

Behavior

Follow-up to #3928 and #3938. #3928 has merged, so this PR targets main; the original expiry branch merge remains in this branch ancestry.

• Remove periodic maintenance of healthy stream attachments and active-attachment renewal. Prepared attachments retain deadlines.
• Recover on producer load, committed session changes and stream terminals, and before deletion. Park after recovery; retry timers exist only for unfinished or failed work.
• Repair a lost producer activation on read only with exact committed Active consumer authority. Healthy reads remain read-only.
• Preserve replay/resume dependencies. Invocation completion or forwarding alone must not release producer history still needed by a reader.
• Make forwarding ownership explicit through canonical intents, exact destination bindings and containing publication records, with admission/publication barriers.

Deliberate tradeoff

Stale producer-side attachment bookkeeping is lazy: a healthy resident producer need not discover a remote consumer disappearance until later lifecycle activity or deletion. Deletion reconciles dependencies before deciding safety. This does not add atomic storage transactions, an outbox redesign, a global cleanup scan, or payload copying. It does change attachment/forwarding records within the existing oplog model; no compatibility path is provided, per repository policy.

The durable-stream maintenance poll is gone, not every timer in the executor. Expiry scheduling, protocol long polls, and bounded retries of unfinished/failed recovery retain their separate responsibilities.

Validation

• Full common library suite: 1,364 passed, 1 ignored.
• Full executor library suite: 2,411 passed, 8 ignored.
• 98 selected executor integration tests passed: durable streams/sessions, RPC, worker initialization, fork/expiry, active-agent lifecycle and oplog sweeping.
• cargo clippy -p golem-common -p golem-worker-executor --all-targets --no-deps -- -D warnings passed.
• Package-scoped Rust formatting and git diff --check passed.
• cargo make generate-configs and direct executor config drift checks passed.
• Docs formatting/version links checked; operations documentation and executor walkthrough rendered and inspected.
• Oracle approved implementation stages, both upstream merges, generated-config follow-through, and the guest-trap failure wakeup fix. Final-stage bug finder reported no bugs.

Full GitHub CI run passed, including all five worker-executor groups, service and CLI integration groups, workspace unit/drift checks, and SDK checks. The entire executor/service/CLI integration matrix was run in CI rather than locally.

[netlify]

✅ Deploy Preview for golemcloud canceled.

Name	Link
🔨 Latest commit	175b426
🔍 Latest deploy log	https://app.netlify.com/projects/golemcloud/deploys/6ab4fbde414bd90008ccb10c

[github-actions]

📖 Docs preview: https://docs-4vp93f2gv-golem-cloud.vercel.app

Built from commit 175b426a331f169e4fb531e15116e68ef93fbad8 by docs.yaml.