test(fdm): cover workflow and ruleset projections

[kubohiroya]

Summary

• Add explicit validator coverage for every upstream L4 workflow status, operation status/outcome, and next action currently listed in Render L4 workflow and L5 ruleset projections without client-side decisions #1731.
• Extend FDM dashboard projection rendering tests for waiting-for-agent, rechecking-repair, completed-with-waiver, unavailable/unsupported states, and missing ruleset issue numbers.
• Display server-provided ruleset fingerprint/digest metadata and update the seven-layer audit note for Render L4 workflow and L5 ruleset projections without client-side decisions #1731 coverage.

Scope

• Issue: Render L4 workflow and L5 ruleset projections without client-side decisions #1731
• Worktree: /private/tmp/hierarchidb-1731-l4-l5-projection-followthrough
• Branch: codex/fdm-1731-l4-l5-projection-followthrough

Validation

• pnpm -w turbo run test typecheck build --filter @hierarchidb/fdm-api
• pnpm -w turbo run test typecheck build --filter @hierarchidb/fdm-plugin
• pnpm -w exec biome check packages/fdm-api/src/__tests__/fdmDashboardValidators.test.ts plugins/fdm-plugin/src/ui/dashboard/FdmDashboardPresentation.tsx plugins/fdm-plugin/src/ui/dashboard/__tests__/FdmDashboardView.test.tsx docs/fdm-seven-layer-contract-audit.md
• git diff --check

Note: the first sandboxed pnpm attempt failed while fetching/verifying pnpm registry signatures. The same validation was rerun with network-capable execution and passed.

Rollback

Revert this PR. The change is limited to projection metadata display, tests, and audit documentation; it does not add workflow/ruleset mutation behavior or local decision logic.

Closes #1731

[kubohiroya]

自己レビュー結果（2026-09-08 JST）

差分を確認しました。今回の変更は #1731 の L4/L5 projection coverage 補強に限定され、workflow/ruleset の状態判断、acceptance/waiver mutation、runtime event からの推論は追加していません。

確認ポイント:

• validator test は Render L4 workflow and L5 ruleset projections without client-side decisions #1731 に列挙された workflow status / operation status / operation outcome / nextAction を明示的に受理し、既存の unknown enum rejection を維持しています。
• UI test は server-provided projection のラベル/message を表示するだけで、クライアント側の解釈や action enablement 条件を変更していません。
• ruleset fingerprint/digest は、サーバ提供 metadata として表示するだけです。

指摘事項: なし。

検証:

• pnpm -w turbo run test typecheck build --filter @hierarchidb/fdm-api: pass
• pnpm -w turbo run test typecheck build --filter @hierarchidb/fdm-plugin: pass
• pnpm -w exec biome check 対象ファイル: pass
• git diff --check: pass

補足: 最初の sandboxed pnpm 実行は pnpm registry signature fetch/verification で失敗しましたが、network-capable execution で同じ検証を再実行して pass しています。