feat(health): add P0 health channel kernel and encrypted health zone.

Lock health recording behind confirm-only state machines, reject public publishes for the health category, and ship the 14-day experiment Page Data templates with tests.

Co-authored-by: Cursor <cursoragent@cursor.com>

src/types.ts

@@ -424,7 +424,7 @@ export type MindSpaceQuota = {
 
 export type MindSpaceCategory = {
   id: string;
-  code: 'oa' | 'private' | 'public' | 'draft' | 'archive';
+  code: 'oa' | 'private' | 'public' | 'health' | 'draft' | 'archive';
   name: string;
   visibilityPolicy: string;
   aiAccessPolicy: string;