feat(automation): add durable runner and signed approval recovery

docs/automation/TODO.md

@@ -0,0 +1,14 @@
+# Autonomous roadmap follow-up
+
+Implementation checkpoints AUTO-00–08 are complete in the qualified scope described in ACCEPTANCE.md. The following are deliberately **not authorized/completed** by installing the controller:
+
+- [ ] Finish current Pre-Phase-10 acceptance; owner records final accepted baseline and candidate-specific cleanup entry.
+- [ ] Publish and independently verify the final pre-Phase-10 development ref (last verified remote still `994bf8f`, local reported `5032ccb`).
+- [ ] Provision dedicated non-production runner/signing identities and protected control-plane installation; resolve/qualify native sandbox failure and actual read/egress/tool/resource boundaries.
+- [ ] Qualify checkpoint-specific provider/browser/Python/PDF/security/preservation adapters, exact suite membership and synthetic runtime fixtures. Do not flip configured merely to bypass this gate.
+- [ ] Review the packs' substage/finding branch preferences and resolve the exact authorized branch policy explicitly.
+- [ ] Sign the proposed enabled policy, environment and roadmap grants plus `phase10-development-entry` only after explicit owner authorization. No real stage has run.
+- [ ] Later, provide mandatory Product Review, provider rights, locale/native, four-concept homepage, security findings and release-evidence decisions at their actual gates.
+- [ ] Optionally provision Task Scheduler under the qualified runner; no schedule is installed now.
+
+Production/main merge remains outside this queue, requiring a separate explicit owner process.