feat(content): harden 006 rollout gates and start 008 profile isolation

[AlexU-A]

Summary

• harden Feature 006 rollout path with deterministic content-schema migration, rehearsal scripts, and status consistency CI
• fix runtime blockers discovered during real-provider smoke rehearsal (cron-parser import compatibility, generation/search bridge mismatch, PostgreSQL source filter query)
• start Feature 008 WP01/WP02/WP03 with enforced tenant profile access checks plus ingestion queue/retry/backpressure metrics
• implement Feature 009 core pipeline contract + orchestration runtime (policy gates, timeout, retry, cancel, queue saturation) and expose pilot bug-triage workflow endpoint
• sync canonical status surfaces (status/feature-readiness.json, generated status table, README/ROADMAP/contributing + PR template)

Validation

• python3 scripts/verify-status-consistency.py
• python3 scripts/generate-status-snippets.py --check
• cd joyus-ai-mcp-server && npm run typecheck
• cd joyus-ai-mcp-server && npm test -- --run tests/content/integration tests/pipelines
• DATABASE_URL=... ./deploy/scripts/feature-006-staging-rehearsal.sh
• DATABASE_URL=... DO_ROLLBACK=true ./deploy/scripts/feature-006-staging-rehearsal.sh
• local non-placeholder smoke harness run with deploy/scripts/feature-006-smoke.sh passing health/auth/happy-path/citations

Notes

• Feature 006 remains not_ready pending named staging migration+smoke records and staging soak evidence.
• 009 pilot endpoint currently defaults to dry-run and requires explicit policy toggle for apply mode.