Make routines act on their own and check every bot action

Scheduled runs are pre-approved: they carry out their brief instead of
drafting for confirmation. A run that can't do its brief calls
report_run_failed and is retried 5 and 10 minutes later; only then does
the user get one "failed after N tries" message, and the routine keeps
why in last_error.

Every reply and task now gets ActionCheckNote: look for an existing
record before creating one, and verify an action took effect before
saying it's done. Memory and instructions saves are read back, and
create_bot, create_schedule, start_task and delegate_task refuse
duplicates.

Co-Authored-By: Claude Opus 5.5 <[email protected]>

src/data/app-data.ts

@@ -112,6 +112,11 @@ export const AppData = {
     BotQueueMaxAttempts: 3,
     BotQueueLockTimeoutMs: 10 * 60 * 1000,
     BotQueueBackoffMs: 30 * 1000,
+    /**
+     * A failed scheduled run is tried again after this, doubling each time
+     * (`scheduledRunRetryAt`), so a short outage doesn't sink the run.
+     */
+    ScheduledRunRetryMs: 5 * 60 * 1000,
     /**
      * The queue handler's lock name. Stable across restarts, so on startup
      * it can release the jobs it was running when the process stopped.