Official-source pipeline foundation

Added

• Added a registry for official recruitment websites and their jurisdictions.
• Added bounded discovery jobs, source health, freshness state, and retry-safe scheduling records.
• Added provenance, candidate normalization, quarantine metadata, and a controlled handoff into editorial review.
• Added primary-owner controls so source activation and publication remain accountable.