Close the epoch record, the minted leaf refusal and the nested resolution

Soul's Cut 8 pass found three rules the code only half held and one
document that promised more than the crate does.

The opener's step 3 said "exactly one epoch record at the current epoch"
and checked neither the count nor the key: a record keyed anything at all
was read as the epoch record, and a second one was never looked at, so a
current record beside a foreign one passed or refused on nothing but the
order the store returned them in. Step 3 now counts before it reads,
refuses a record under any key but the epoch, and names the defect in
`found`: the stored epoch, the offending key, or the count.

The campaign row minted `PipelineRefusal::FieldBound` for an empty
`repos`. The organ does not get to invent the leaf's refusals; an empty
`repos` is admission's own rule and is now `MindRefusal::EmptyRepos`.

The matrix admitted `Withdrawn` on a resolution, which made a subject
resolvable twice over: withdraw the resolution and the subject is open
again. A subject resolves at most once, and a resolution is not itself a
subject, so `resolution` joins `campaign`, `cut_report`, `verdict`,
`instance` and `hand_off` as not resolvable. The key grammar still spells
a resolution of a resolution; admission refuses it here. Self's default
ruling on Q17, standing until the operator rules.

`README.md` and `AGENTS.md` claimed CultNet publication and a Qdrant
connection in the present tense and called the store `.cc`. The daemon is
a stub, nothing connects to Qdrant, and the live crate writes
`mind.redb`. They say so now.

Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com>

AGENTS.md

@@ -17,10 +17,12 @@ Studio's job, not Huginn's.
   it persists and admits an instance's mind, over `cultcache-rs` and
   `epiphany-pipeline` pinned by git rev. `huginn-daemon` and `eureka-state`
   are stubs with no dependencies; nothing here publishes or connects yet.
-- Owned: an instance's memory documents, their admission, and their CultNet
-  publication.
-- Depends on: Qdrant, directly. Unreachable Qdrant is a loud refusal, never a
-  fallback store.
+- Owned: an instance's memory documents and their admission, in `huginn-mind`,
+  over a redb CultCache store at `<state_root>/minds/<instance>/mind.redb`.
+  Their CultNet publication is owned here and not built; `huginn-daemon` is a
+  stub.
+- To depend on: Qdrant, directly, once retrieval exists. Unreachable Qdrant is
+  to be a loud refusal, never a fallback store. No crate connects to it yet.
 - Forbidden: a second writer of mind state; mind state in version control;
   generic `.cc` inspection, which is CultCache Studio's; renderer-owned truth.