fix: make automation completion evidence durable

Persist successful watched-file uploads in a dedicated fsync-backed ledger before exposing completion to the renderer. Match entries by normalized full path, hoster, size, and modification time so restart reconciliation skips unchanged completed files while changed files and explicit manual retries remain available.

Remove restored queue ghosts from the ledger even when history and user upload logging are unavailable. Preserve per-hoster partial completion, capture missing file metadata asynchronously, fail closed on corrupted or unwritable evidence, and keep local persistence failures outside automatic upload retries.

Stream managed upload logs with bounded lines, bytes, files, directories, and result counts. Include numbered rotations, reject unconfirmed rows, share concurrent scans through a generation-safe cache, invalidate after successful appends, avoid synchronous configuration and directory reads, and close streams on every path.

tests/stats.test.js

@@ -105,6 +105,12 @@ test('classifyErrorCategory: aborted is its own bucket (not retryable)', () => {
   assert.strictEqual(isRetryableCategory('aborted'), false);
 });
 
+test('automation completion persistence failures are never retried as uploads', () => {
+  const category = classifyErrorCategory('Automatik-Abschlussnachweis konnte nicht gespeichert werden');
+  assert.strictEqual(category, 'local-persistence');
+  assert.strictEqual(isRetryableCategory(category), false);
+});
+
 test('classifyErrorCategory: unknown for everything else', () => {
   assert.strictEqual(classifyErrorCategory(''), 'unknown');
   assert.strictEqual(classifyErrorCategory(null), 'unknown');
@@ -176,4 +182,5 @@ test('isRetryableCategory: only transient + network + unknown retry-worthy', ()
   assert.strictEqual(isRetryableCategory('file-rejected'), false);
   assert.strictEqual(isRetryableCategory('account-error'), false);
   assert.strictEqual(isRetryableCategory('aborted'), false);
+  assert.strictEqual(isRetryableCategory('local-persistence'), false);
 });