CommandDispatchState core write protocol + handler hooks (PR-2 of C2/BOLT-1637)

PR-2 stacked on PR-1 branch winston/bolt-1637-command-dispatch-state-schema (NOT main). Branch winston/bolt-1637-command-dispatch-core. Shared adapters/oem dispatch core: crash-safe two-write protocol (pending_confirmation before OEM call, active/failed after), dispatchAttemptId dedup, idempotent claim-and-reverse generalizing Kore claimDispatch, two opt-in IManufacturerHandlers hooks (describeDispatchState + reverseDispatch). No command.cancel event, no per-manufacturer migration, no device CommandStatus cancelled value. Spec: specs/20260716-lifecycle-authority-unification/command-lifecycles/cancel-design.md