Forge: executable runbook framework

feature_id: FEAT-FORGE-RELIABILITY

Add packages/forge/runbooks/ with Runbook interface { id, appliesTo, detect(ctx), verify(ctx), heal(ctx), autonomyDial, notes }. Every SEV-2 pipeline alert consults the runbook registry before falling through to Ledger.