docs: authorize CK-07R1 clean committed transition

[douglasmonsky]

Summary

• add a versioned CK-07R1 clean-committed transition authority preserving the terminal-failure v1 authority bytes
• bind PR Fix CK-07R1 planner-selected large publication path #448 base 652f2166…, source head 927aa06f…, and the exact seven candidate/evidence paths
• admit only the exact dirty all-or-none prepublication representation, exact clean PR head, or exact integrated/squash-tree representation
• reject mixed, partial, extra, wrong-base/tree/head/hash states while preserving consumed token, zero invocation/launch, no receipt/runtime/implementation acceptance, and all downstream holds

Validation

• real dirty combined and clean PR Fix CK-07R1 planner-selected large publication path #448 head preflights green
• focused authority consumers: 162 passed
• just vp green
• full functional suite: 1,485 passed, 1 skipped
• bounded performance lane: 13 passed; an unrelated lease/timing run was classified by targeted rerun
• Pyright 0 errors; release and rebuilt distribution checks green
• one bounded reviewer: two findings accepted and fixed; correction pass clean

Safety

Authority/docs/schema/scope/tests only (12 exact paths). No implementation files or runtime artifacts are included. No qualification command, child/fork, token or evidence mutation, receipt, retry/restart/replacement, PR #394 mutation, cleanup, or downstream dispatch.