[codex] Validate orchestrator event intake

[RoyZhao1991]

/claim #1870

Summary

• Add shared event-bus intake validation in OrchestrationEngine for tenant ownership, attempt monotonicity, revision monotonicity, and lifecycle transitions before state commit.
• Preserve existing run lifecycle state for invalid events and record sanitized audit decisions plus event_intake metrics without copying private payload data.
• Export AgentStatus for engine imports and switch MetricsCollector to RLock so the existing timer test and full suite complete reliably.

Validation

• uv run pytest tests/test_orchestrator_event_intake.py tests/test_metrics.py tests/test_scheduler.py -q
• uv run pytest -q
• uv run flake8 src/orchestrator/engine.py src/agent/init.py src/common/metrics.py tests/test_orchestrator_event_intake.py
• python3 -m compileall -q src tests
• git diff --check
• gh repo view orchestration-agent/AgentOrchestration --json viewerHasStarred --jq .viewerHasStarred -> true

Fixes #1870