upgrade-gate

Compatibility governance for DeepSeek Harness: upgrade pre-flight gate, storage-format fingerprint, backup, session migration, per-profile lockfile, plugin x DSH compat matrix.