feat(e2-conversion): add durable Orbit processing lifecycle

[shark0F0497]

Summary

• add the independent e2conversion.Manager durable lifecycle module
• implement Start/Get/Retry/Cancel/Logs/RetryQA for single-Episode E2 processing
• add strict E2 admission gates for device type, provenance, tar source, and approved raw QA
• freeze source URI, ETag, size, image revision, Orbit request, and generation output prefix
• add Orbit reconcile, cancellation, delete cleanup, and verification workers
• validate E2 manifest v1, H.264 MCAP, rosbag2 metadata, and independent calibration JSON outputs
• persist calibration output identity through existing calibration_result_* derivative columns
• add independent E2 image configuration revisions and concurrency/resource-limit handling
• wire E2 manager startup and shutdown into the Keystone server lifecycle

Validation

• gofmt -w internal/services/e2conversion internal/server/server.go
• go test ./internal/services/e2conversion/...
• go test ./internal/server/...
• go test ./...
• git diff --check

Scope

This PR adds the backend processing lifecycle only. Data Ops endpoints, automatic orchestration, cloud sync source resolution, and Synapse UI remain in later PRs.