Add AWS hybrid automation loop and validation gating

[bgyss]

Summary

• Wire recomp automate through the automation loop to call the AWS hybrid path, including SQS/Step Functions submission, state observation, and strategy-response schema validation before applying mutations in crates/recomp-cli/src/{main,automation}.rs.
• Update automation docs and runbook plus sample configs to reflect the new loop controls, strategy catalog, and strategy gateway expectations in docs/automation-loop.md, docs/title-a24b9e807b456252-runbook.md, samples/automation.toml, and samples/strategy-catalog.toml.
• Improve the Ghidra evidence export tooling (scripts/ghidra/ghidra_export_evidence.py) and add cloud resume/idempotency coverage for duplicate worker executions and status/event logging scenarios.

Testing

• Not run (not requested)