Sprints SPRINT_20260418_025_Concelier_durable_mirror_bundle_import_runtime
and SPRINT_20260419_026_Concelier_mirror_import_allowlisted_root.
- MirrorBundleImportRuntimeService: durable PostgreSQL-backed live mirror
bundle importer replacing the testing-only in-memory path.
- Enforces an allowlisted import root (Mirror.ImportRoot) and rejects
bundle/trust-root paths that resolve outside it; relative paths resolve
against the configured root, not the process cwd.
_025 and _026 ship together because _026 extends the same live importer
introduced in _025; splitting leaves an unguarded filesystem reach.
Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
64ea1f0994
