Add recovery orchestration package and fail-closed backup-create controls

[jsugg]

Summary

This PR introduces a first recovery subsystem slice under src/clawops/recovery and routes clawops recovery backup-create through it while preserving the existing CLI surface.

Changes

• Added src/clawops/recovery/ package with:
  • models.py (typed recovery models)
  • policy.py (profile validation and retention metadata)
  • planner.py (deterministic include/exclude plan and size/file estimates)
  • backends.py (OpenClaw and tar fallback backend strategies)
  • orchestrator.py (plan/create orchestration)
  • retention.py, checkpoint.py, telemetry.py module scaffolding
• Updated src/clawops/strongclaw_recovery.py to use the orchestrator.
• Extended backup-create flags:
  • --profile
  • --dry-run
  • --allow-fallback
• Implemented fail-closed default for OpenClaw backup-create failures when OpenClaw is available; fallback now requires explicit --allow-fallback.
• Kept fallback recursion and atomic cleanup safeguards intact.
• Updated both backup docs copies to describe new flags and behavior.
• Added/updated tests:
  • tests/suites/unit/clawops/recovery/test_policy.py
  • tests/suites/unit/clawops/test_strongclaw_recovery.py