feat(recovery): add "Ask CEO to fix" delegated recovery to the recovery card

Implements the recovery-card UI integration for PAP-12752, wiring the
delegated recovery backend contract into the issue detail experience.

- issuesApi.delegateRecoveryAction() calls POST /issues/:id/recovery-actions/delegate.
- IssueRecoveryActionCard offers "Ask CEO to fix" (outcome delegate_ceo) first in
  the Resolve popover, with a Recommended pill. It is backend-authoritative and shown
  only when wakePolicy.type === "manual_repair_required", the state is not
  resolved/observe_only, and it has not already been delegated. A persistent
  "Recovery task" link row surfaces the created recovery issue.
- IssueDetail wires delegate_ceo through a mutation: on success it refreshes the
  source issue (now blocked on the recovery task) and shows a success toast linking
  to the created task; on failure it surfaces the API error without mutating local
  recovery state. False-positive actions stay board-only.
- Tests cover menu rendering + placement, API invocation, success toast/link, and
  failure handling. Storybook states show the delegate menu and delegated card.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

Co-Authored-By: Paperclip <noreply@paperclip.ing>

ui/src/api/issues.test.ts

@@ -109,4 +109,19 @@ describe("issuesApi.list", () => {
       },
     );
   });
+
+  it("posts delegated recovery to the source issue delegate endpoint", async () => {
+    await issuesApi.delegateRecoveryAction("issue-1", {
+      actionId: "00000000-0000-0000-0000-0000000000aa",
+      target: "ceo",
+    });
+
+    expect(mockApi.post).toHaveBeenCalledWith(
+      "/issues/issue-1/recovery-actions/delegate",
+      {
+        actionId: "00000000-0000-0000-0000-0000000000aa",
+        target: "ceo",
+      },
+    );
+  });
 });