Implement shared live fields and checked query hydration

Add native register acknowledgments and idempotent mutation replay, shared optimistic field controllers, overlapping custom setters, non-suspending hooks and explicit Suspense. Carry checked @live provenance through batched queries and hydrate shared browser fields with coverage leases. Update tracker/scaffolds/guides and verify compiler, PostgreSQL, browser and immutable workspace paths.

proto/quixos/orch.proto

@@ -87,20 +87,16 @@ message InvokeCapabilityResponse {
   FieldEditing field_editing = 7;
 }
 
-// Resolved from the checked native getter/setter binding, not Value.source.
-message FieldEditing {
-  string getter_operation_id = 1;
-  string setter_operation_id = 2;
-  string document_type = 3;
-  string binding_digest = 4;
-}
 message EditCapabilityFieldRequest {
   // The public getter; setter must belong to the same value member.
   quixos.CapabilityRef capability = 1;
   string object_id = 2;
   string setter_operation_id = 3;
   string binding_digest = 4;
-  camino.CrdtValue update = 5;
+  oneof edit {
+    camino.CrdtValue update = 5;
+    camino.Value replacement = 7;
+  }
   string client_mutation_id = 6;
 }
 

proto/quixos/refs.proto

@@ -9,6 +9,20 @@ message CapabilityRef {
   ConformanceWitness conformance = 3;
 }
 
+// Resolved native editing semantics. A source snapshot alone grants no writer.
+message FieldEditing {
+  string getter_operation_id = 1;
+  string setter_operation_id = 2;
+  string document_type = 3;
+  string binding_digest = 4;
+  enum Mode {
+    UNSPECIFIED = 0;
+    REGISTER = 1;
+    CRDT = 2;
+  }
+  Mode mode = 5;
+}
+
 message ConformanceWitness {
   string object_id = 1;
   string interface_revision_id = 2;