fix(stovepipe): terminate failed record work

[mnoah1]

Summary

Intent:

• Ensure record-stage work that exhausts the primary retry budget reaches an observable stopping point instead of retrying indefinitely on the DLQ.
• Preserve whatever durable effects already succeeded without trying to reconstruct or complete the original workflow.
• Keep fail-closed behavior when no validation fact was recorded. Persistent promotion permission failures are one example of this broader case.

Changes:

• Add a standalone record DLQ controller that reloads the durable Request and appends an idempotent record_failed history event.
• Retain recognized failure context as bounded event metadata; promotion is recorded as record_stage=promotion rather than as a separate event type.
• Acknowledge malformed or unresolvable poison after logging and counting it; retry only Request reads and history persistence.
• Do not create facts, advance bookmarks, call source control, or publish hooks from the record DLQ.

---

_{Generated by the 🪄 pr-create skill in devexp-agent-marketplace}

Test Plan

• go test ./stovepipe/entity ./stovepipe/core/requestlog ./stovepipe/controller/record ./service/stovepipe/server
• ./tool/bazel test //stovepipe/entity:go_default_test //stovepipe/core/requestlog:go_default_test //stovepipe/controller/record:go_default_test //service/stovepipe/server:go_default_test --test_output=errors
• make lint
• make check-tidy
• make check-gazelle

Issues