Fix project sync completion lock race

[Hydralerne]

What & why

The v0.1.37 release gate failed because a sync conflict became visible before its deferred project-lock release. A client could see a finished operation and still be blocked from using the project.

Publish terminal operation results and release their reservations in one SQLite transaction. Keep import reservations until the final result is published, and retain protection if a recovery journal cannot be read. Remove the separate deferred unlock paths.

Regression coverage checks status/lock agreement, rollback when either database write fails, isolation from other reservations, and restart recovery without replaying already committed files.

Component

• daemon (Go)

Type of change

• Bug fix

Checklist

• Read CONTRIBUTING.md.
• Daemon formatting, vet, build, and vulnerability check pass.
• Full local race suite passes: go test -race ./... -skip '^TestLiveClaude$'. The excluded test would use this Mac's authenticated Claude account for a live model request; CI skips it when unauthenticated.
• The original failing conflict test passes 100 consecutive runs under -race.
• SDK typecheck, build, and unit tests pass (176 passed, 19 opt-in tests skipped).
• Added regression tests.

No public API or documentation changes are required.