Add CNC-owned Graphile build-state retirement

[Zetazzz]

Summary

This is the third PR in the replacement performance stack:

1. Add a reusable Graphile performance harness #1716 — generic fresh-process performance harness
2. Add zero-patch CNC scoped introspection package #1719 — zero-patch CNC scoped introspection package
3. this PR — CNC-owned build-state retirement

It adds an opt-in BuildStateRetirementPlugin in normal CNC source. ConstructivePreset installs that plugin explicitly; Graphile's defaultPreset remains unchanged.

Architecture boundary

Crystal #1 remains an independent upstream proposal for only the neutral build.registerAfterSchemaValidation(callback) lifecycle API. The graphile-build dist patch here mirrors that API because the current installed release does not contain it.

All concrete retirement behavior stays in CNC:

• normal CNC source decides whether and when retirement runs;
• the graphile-build pnpm patch owns the private retirement state machine, core/Behavior cleanup, disposer registration, fail-closed guards, aggregate-error handling, and GRAPHILE_BUILD_STATE_RELEASED;
• the graphile-build-pg pnpm patch adds owner cleanup only for PgBasics, PgCodecs, and PgPolymorphism;
• normal CNC owners clean up graphile-search and graphile-connection-filter state;
• graphile-meta snapshots runtime metadata onto the finalized schema before build state is retired.

This PR is rebased onto #1719's independent graphile-scoped-introspection package. It does not modify that package or reintroduce the removed @dataplan/pg and pg-introspection patches. The performance worker continues to import ScopedIntrospectionPreset directly from its owning package.

No ReleaseBuildStatePlugin is imported or exported. No retirement behavior is added to Graphile's default preset. No pg-many-to-many change is included, and the graphile-build-pg patch contains no scoped-introspection hunks.

Performance harness integration

The generic harness from #1716 is extended with four attribution cases without loading ConstructivePreset:

• stock
• scoped
• retire
• scoped-retire

Each arm installs only its requested scoped-introspection and/or retirement plugin.

Validation

• graphile-scoped-introspection: 6 suites / 18 tests
• graphile-settings non-integration suites: 8 suites / 56 tests
• build-state retirement contracts cover opt-in/default behavior, validation failure, reverse disposer order, aggregate errors/fail-closed state, guards, and runtime execution
• graphile-build-pg owner cleanup: PgBasics, PgCodecs, PgPolymorphism
• graphile-search and graphile-connection-filter owner cleanup tests
• graphile-meta: 131 tests / 3 snapshots
• performance harness: 7 suites / 9 tests
• affected packages: CJS and ESM builds pass
• affected packages: ESLint passes with no errors (existing unrelated warnings remain)
• Prettier and diff checks pass
• pnpm install --frozen-lockfile --offline passes
• real PostgreSQL ConstructivePreset integration: runtime query succeeds and captured build state is released
• real PostgreSQL four-arm smoke:
  • unique PIDs: 29571, 29573, 29585, 29587
  • all runtime and case validations passed
  • all schema hashes matched: 3b9dab5243611a57da1c0721ea3bc1aba455051124e43549e3c326178b3e97c1
  • stock/scoped retained state
  • retire/scoped-retire released state
  • generated report contained no database URL or credential material

Patch lifecycle

The neutral lifecycle portion can be removed when an equivalent API is available in the installed Graphile release. The concrete retirement implementation remains CNC-owned until suitable upstream ownership APIs exist.