feat(peacepad-v2): gate staging approval and restoration

[fefejiro]

Scope

Adds the fail-closed prerequisites for an eventual isolated AWS staging deployment. This PR does not deploy, contact AWS, configure accounts, or enable production writes.

• committed approval example defaults deployment and every approval to false
• documents two-account topology, budgets, owners, remote state, and first-live-plan stop conditions
• validates region-specific encrypted/locked backend templates without credentials
• adds a fictional-only PostgreSQL custom dump/restore drill
• records exact proof boundaries in the V2 status dashboard

Local verification

• PEACEPAD_V2_STAGING_PREREQUISITES_STATIC_PASS
• PEACEPAD_V2_INFRA_SECRET_SCAN_PASS (32 files)
• PEACEPAD_V2_POSTGRES_RESTORATION_PASS
  • PostgreSQL 18.3 on loopback 127.0.0.1:55432
  • separate temporary source and restored databases
  • 2 fictional records, 2 SHA-256 migration checksums, Canada/U.S. labels verified
  • custom dump SHA-256 recorded under D: outside source control
  • both temporary databases removed
• git diff --check passed

The local Terraform executable hung after the laptop restart, including on terraform -version, and was stopped. This is recorded as BLOCKED for this commit rather than represented as a source failure. The same stack was HOSTED VERIFIED on PR #174; this PR's hosted workflow must pass independently.

Safety boundaries

• no AWS credentials or API calls
• no infrastructure apply
• no production identity or data
• no real family/court records
• no App Store or TestFlight changes
• ca.peacepad.nextnative.lab unchanged
• production writes remain disabled
• live Capacitor V1 untouched