feat: add audit-verified status updates with override tracking

Status updates (feature/test update and batch-update) now verify the
requested status against Roslyn audit classification. Mismatches
require --override "reason" to force. Overrides are logged to a new
status_overrides table and reviewable via 'override list' command.

porting-schema.sql

@@ -88,6 +88,17 @@ CREATE TABLE IF NOT EXISTS library_mappings (
     updated_at DATETIME DEFAULT CURRENT_TIMESTAMP
 );
 
+CREATE TABLE IF NOT EXISTS status_overrides (
+    id INTEGER PRIMARY KEY AUTOINCREMENT,
+    table_name TEXT NOT NULL CHECK (table_name IN ('features', 'unit_tests')),
+    item_id INTEGER NOT NULL,
+    audit_status TEXT NOT NULL,
+    audit_reason TEXT NOT NULL,
+    requested_status TEXT NOT NULL,
+    comment TEXT NOT NULL,
+    created_at DATETIME DEFAULT CURRENT_TIMESTAMP
+);
+
 -- Indexes
 CREATE INDEX IF NOT EXISTS idx_features_module ON features(module_id);
 CREATE INDEX IF NOT EXISTS idx_features_status ON features(status);