ConsistencyGroupLifecycle

Mandatory real lifecycle scope. Hold the actual old consensus/QC/listener, safety/index, pipeline and namespace writer gates throughout run, in their installed global order, then controller gate. Releasing before run completes is invalid. The original-group authenticator independently checks the fixed deployment/layout/mutation coverage. No permissive default is provided.