docs: record functional audit findings and split fix verification

[changeroa]

Summary

Record the non-security functional audit at b091cc4, the first implementation batch, remaining work, and the independently tested PR split. Separate aggregate working-tree results from individual PR results, and document watcher receipt recovery limits, additive schema migration/rollback considerations, and the overlap with #137.

This is a documentation-only index of proposed fixes; it does not claim that the implementation PRs are already merged or deployed.

Verification

• Each linked implementation PR passed its relevant full package suite and TypeScript checks on Node 22.
• Split patches were verified to reconstruct the original working changes exactly before publication metadata was added.
• Branch-flow, service-owned boundary, and git diff checks passed.
• No paid generation, deployment, production restart, or merge performed.
• Full release gate and real gateway replacement E2E were not run; no release-readiness claim.

Architecture Boundary

Documentation preserves current ownership and explicitly leaves the #137 watcher design overlap for review. No runtime, asset, manifest, or production DB change is included in this PR.

Implementation PRs

• fix(conversation): preserve turn history and reserve watcher deliveries #139 — 대화 기록·watcher 전송 예약 (Draft)
• fix(openclaw): bound media hydration and preserve existing attachments #140 — 이미지 timeout·첨부 보존
• fix(service): recover worker leases and drain archive work on shutdown #141 — 워커 복구·종료 drain
• fix(service): preserve channel settings and apply imports atomically #142 — import 설정 보존·transaction
• fix(generate): ship runnable CLI and compiled shared modules #143 — 생성 패키지 실행 경로
• fix(generate): serialize manifest updates and reject stale saves #144 — manifest 동시 변경 보존
• fix(hermes): preserve response whitespace when stripping MEDIA directives #145 — Hermes 원문 공백 보존