Reconcile a recovery bundle.

Receipt construction

1. Open a workspace, then load its manifest inventory.
2. Read each manifest. Retain entries whose release equals the inventory’s active_release and whose status is approved.
3. Validate each fragment against its sha256. Hash the UTF-8 fragment exactly as returned, without a trailing newline.
4. Sort retained fragments by numeric sequence, ascending.
5. Build the receipt input: the inventory’s receipt_seed, followed by each retained fragment, joined with a single LF newline. Do not append a final newline.
6. Compute the SHA-256 digest of those UTF-8 bytes and encode it as lowercase hexadecimal.
7. Submit the digest as {"proof":"…"} to POST /console/api/reconcile using Content-Type: application/json and the workspace cookie.

The accepted receipt supplies a workspace-bound download address. A receipt from another workspace cannot open the bundle.