feat(goal-run): add multi-checkpoint goal orchestration with H5 and admin surfaces.

Persist goal runs in MySQL, bind agent runs to checkpoints, expose awaiting-approval
UX in chat, and add admin inspection routes with local verify scripts.

Co-authored-by: Cursor <cursoragent@cursor.com>

admin-bootstrap.mjs

@@ -19,6 +19,7 @@ import { createLlmProviderService } from './llm-providers.mjs';
 import { createAssetGatewayConfigService } from './asset-gateway.mjs';
 import { createImageMakeAdminConfigService } from './image-make-admin-config.mjs';
 import { createMemoryV2AdminConfigService } from './memory-v2-admin-config.mjs';
+import { createGoalRunAdminOpsService } from './goal-run-admin-ops.mjs';
 import { createOrchestratorAdminConfigService } from './services/orchestrator/admin-config.mjs';
 import { createOrchestratorObservabilityService } from './services/orchestrator/observability.mjs';
 import { createSkillRuntimeAdminConfigService } from './skill-runtime-admin-config.mjs';
@@ -112,6 +113,7 @@ export async function createAdminServices(env = {}) {
   });
   await imageMakeAdminConfigService.ensureSchema();
   const memoryV2ConfigService = createMemoryV2AdminConfigService(pool);
+  const goalRunAdminOpsService = createGoalRunAdminOpsService(pool, { env: process.env });
   const orchestratorConfigService = createOrchestratorAdminConfigService(pool);
   await orchestratorConfigService.ensureSchema();
   const orchestratorObservabilityService = createOrchestratorObservabilityService({
@@ -165,6 +167,7 @@ export async function createAdminServices(env = {}) {
     assetGatewayConfigService,
     imageMakeAdminConfigService,
     memoryV2ConfigService,
+    goalRunAdminOpsService,
     orchestratorConfigService,
     orchestratorObservabilityService,
     mindSearchConfigService,