Pin the facts a Move derives from: an engine image's version, the active Instance, and each engine's move method #330

Parent

#324

What

Pin the facts a Move is derived from, before anything derives one (chapter 14, chapter 20):

• the images lock records version (major.minor.patch) for an image an engine Process runs; E_ENGINE_VERSION_MISSING otherwise;
• ClusterState carries instances: each engine Process's active Instance (version, namespace, node) and, for an open Move, its phase and flippedAt;
• the Platform document's engines.<engine>.move: {image, breaksOn, reverse} and delivery.move: {timeout, retention}.

Lands in TypeScript only, after emf/ is deleted (#347), with the rendered-tree and diagnostics oracles it affects, in one pull request. The intent, effective and dependencies goldens are dropped (#346), so it adds none. Schemas regenerate with their accept/refuse corpus. The descriptor oracle is not extended: it goes when deploy-config-schema retires (#346).

Behaviour (draft ledger row)

The images lock, ClusterState and the Platform document carry an engine image's version, each engine Process's active Instance and each engine's move method and the move policy, and a lock entry an engine Process runs without a version is refused with E_ENGINE_VERSION_MISSING.

Blocked by

#341, the map whose rewrite plan replaces the closed placement ticket #328 (see #350).