feat(#1105): add external-job capability (SLURM scheduler-adapter producer half) (#1998)

* feat(#1105): add external-job capability (SLURM scheduler-adapter producer half)

The async external-job consumer half (#1165) shipped long ago: the core loop
reads .planning/async-jobs/<job>.json manifests and treats a non-terminal one
as the legal external_job_waiting half-state. The PRODUCER half (#1164) was
the remaining unimplemented piece of #1105.

This adds the producer as a default-off capability:

- capabilities/external-job/ — capability.json (execute:wave:post -> executor,
  plan:post -> planner contributions, external_job.* config keys, default-off)
  + fragments teaching runtime-budget classification and externalization.
- src/external-job.cts -> gsd-core/bin/lib/external-job.cjs — pure producer
  module: SLURM state -> manifest-status map (no guessing), manifest
  build/validate (versioned stability contract), sbatch/squeue/sacct parsers,
  and a fail-closed manifest writer (refuses a second non-terminal job for a
  plan_id already in flight; refuses to clobber a malformed manifest). fs/clock
  seams for deterministic tests.
- scripts/slurm-adapter.cjs — operator CLI (submit/poll/show) wrapping bounded
  sbatch/squeue/sacct subprocesses; surfaces manifest commands for confirmation
  and never auto-runs them (trust boundary).
- tests/external-job.test.cjs — 23 behavioral + fast-check property tests.
- docs/reference/long-running-operations.md + docs/how-to/async-external-jobs.md.
- CONTEXT.md glossary entry for the External-job Capability.
- Regenerated capability-registry.cjs; pruned the now-stale test-file-count
  allowlist entry (external-job is at the 2-file cap).

* chore(#1105): backfill PR number in changeset

* fix(#1105): sync capability artifacts + update registry shape-pin tests

gsd-test caught that adding the external-job capability requires its
dependent artifacts regenerated and its registry-shape drift absorbed:

- sync-manifest-versions: stamp 1.7.0-rc.2 into capability.json (was 1.0.0).
- gen-capability-matrix --write: regenerate docs/reference/capability-matrix.md.
- gen-inventory-manifest --write: regenerate docs/INVENTORY-MANIFEST.json.
- check-gap-analysis-plan-post-e2e: plan:post now has 1 contribution
  (external-job planner fragment) instead of 0.
- execute-wave-post-gate-pipeline-e2e: execute:wave:post now has 2
  contributions (mempalace + external-job) instead of 1.

* fix(#1105): regenerate capability-registry after version stamp

sync-manifest-versions re-stamped external-job/capability.json from
1.0.0 to 1.7.0-rc.2 after the last registry regeneration, leaving the
committed capability-registry.cjs stale (CI gen-capability-registry
--check failed). gsd-test masked this because its setup runs the full
'npm run build' (which regenerates the registry); CI's 'npm test'
pretest only runs build:lib.

tests/check-gap-analysis-plan-post-e2e.test.cjs

@@ -493,7 +493,7 @@ describe('resolveLoopHooks plan:post — pure function against real registry', (
     assert.strictEqual(result.activeHooks[0].capId, 'gap-analysis');
   });
 
-  test('[happy] real registry byLoopPoint plan:post has 1 step (mempalace), 0 contributions, and 1 gate (gap-analysis)', () => {
+  test('[happy] real registry byLoopPoint plan:post has 1 step (mempalace), 1 contribution (external-job planner fragment), and 1 gate (gap-analysis)', () => {
     const entry = realRegistry.byLoopPoint['plan:post'];
     assert.ok(entry, 'plan:post must exist in byLoopPoint');
     assert.ok(Array.isArray(entry.steps), 'steps must be an array');
@@ -501,7 +501,8 @@ describe('resolveLoopHooks plan:post — pure function against real registry', (
     assert.ok(Array.isArray(entry.gates), 'gates must be an array');
     assert.strictEqual(entry.steps.length, 1, 'plan:post must have 1 step (mempalace capture)');
     assert.strictEqual(entry.steps[0].capId, 'mempalace', 'plan:post step must be from mempalace');
-    assert.strictEqual(entry.contributions.length, 0, 'plan:post must have zero contributions');
+    assert.strictEqual(entry.contributions.length, 1, 'plan:post must have 1 contribution (external-job planner runtime-budget fragment)');
+    assert.strictEqual(entry.contributions[0].capId, 'external-job', 'plan:post contribution must be from external-job');
     assert.strictEqual(entry.gates.length, 1, 'plan:post must have exactly one gate');
     assert.strictEqual(entry.gates[0].capId, 'gap-analysis');
   });