merge: sync Rongsong's scheduler-framework (122 commits, 070c7869..f01ae353)

Introduces WAL replay field-completeness fixes (bug-1687..1697, 1731), scheduler snapshot job-allocation restore, heap UAF fixes (vtask_enq, xcealloc, builtin_fcfs, limit), HA fixes (bug-1694/1695/1696), xceadmin retry, worker signal-exit severity, and their test suites.

Conflicts resolved keeping both sides (drop-audit passed):
- worker.c: mark_worker_jobs_exit (bug-1509 B1) + fetchfile_signal_worker_disconnect (bug-1693)
- handler.go: DefaultBroker.Publish (EventJobFinished) + bug-1731 logging
- config_repl.c / test_config_repl.c: our ns-resolution comment / unique-tmpdir
- test_dispatch_commit.c: both B3-UNKWN and bug-1697 start_time assertions

Excluded Rongsong's bookkeeping per policy: .wolf/, .kiro/, CHANGES.md, reports/;
.claude/ + CLAUDE.md kept ours (his settings.json has machine-absolute paths).

src/worker/testsuite/meson.build

@@ -81,3 +81,19 @@ test('worker dbus_workers_update test', dbus_workers_update_test,
     suite: 'worker',
     timeout: 60,
     env: ['ASAN_OPTIONS=detect_leaks=0'])
+
+# User-reported log-severity bug: a deliberately-killed job (SIGTERM/SIGKILL
+# via worker_signal_callback(), xcecd_worker.c) was logged at ERROR by
+# ipc_worker_send_status() (uv_ipc.c) even though process_exit_callback()
+# two lines earlier already judges the same event INFO-worthy. See
+# test_uv_ipc_job_exit_severity.c's own header comment.
+uv_ipc_job_exit_severity_test = executable('uv_ipc_job_exit_severity_test',
+                                           'test_uv_ipc_job_exit_severity.c',
+                                           include_directories: [worker_test_incdir],
+                                           dependencies: worker_test_deps,
+                                           install: false)
+
+test('worker uv_ipc job_exit_severity test', uv_ipc_job_exit_severity_test,
+    suite: 'worker',
+    timeout: 60,
+    env: ['ASAN_OPTIONS=detect_leaks=0'])