T08: give provisional defaults an owner, a date, and a visible age

Five scenarios encoded U-item defaults with no owner and no review date,
so they could shape the kernel indefinitely while looking handled.

Each now carries provisional_owner and provisional_raised, and the
runtime's ScenarioFile learned both fields (deny_unknown_fields meant
adding them to YAML alone would have failed every scenario -- the parser
had to agree).

make coverage reports every provisional item with its owner and age in
days, warns on any with no owner, and warns past 30 days. It WARNS
rather than breaking the build, on purpose: the ruling is ground-game's
to make and the kernel cannot make it for them. What the loop can
enforce is that evidence files list them, which is now stated in
GroundRules.

rule-coverage --self-test gained an assertion that every provisional
item has both fields, so the next one added without them fails a
command rather than passing quietly.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>

workplans/CB-WP-0003-loop-hardening.md

@@ -286,7 +286,7 @@ self-report of which one it was.
 
 ```task
 id: CB-WP-0003-T08
-status: todo
+status: done
 priority: low
 state_hub_task_id: "c2ee91ee-e551-48a7-b1a9-477c34c0690c"
 ```