App Platform Phase 5: add review and dry-run actions

[Maneek21]

Summary

• add explicit connected-App review, activation, upgrade, disable, and re-review lifecycle
• add one deep AppActionService for list, resolve, and prepare across UI, Defty, employee-runtime, and human-MCP identities
• recheck exact grant, dependency, connector, provider schema, relation, resource fields, membership, token scope, employee health/assignment/budget
• seal short-lived Run-owned input candidates while keeping recipient, subject, and body out of safe outputs
• keep invoke disabled with zero Runs, approvals, or provider effects

Validation

• four-surface disposable-PostgreSQL parity and live-revocation proof: 1 passed
• connected grant lifecycle database suite: 3 passed
• focused architecture, contract, and encrypted-candidate tests: 12 passed
• API typecheck

This is stacked on the Phase 5 foundation PR. Local PostgreSQL uses the documented test-only vector shim; real pgvector remains the Loop 7 release-host gate.