[TASK] Remover actor — central destructive path (S1)

[kirich1409]

Context

Single point of destructive action. Modules never call Trash/Archive/rm directly; they return [CleanAction] from plan(), and Remover executes actions. Each action triggers re-validation: deny-list, TOCTOU, symlink-policy.

Acceptance criteria

• Remover actor exposes execute(actions:mode:denyList:log:).
• Re-validates deny-list and TOCTOU before each action.
• Writes a per-item entry to RemovalLogger.

Files to touch (estimate)

best-effort estimate; agent refines during implementation

Implementation notes

• Research report §S1.

Dependencies

• Blocked by [TASK] FileSystem protocol + FileSystemImpl #38
• Blocked by [TASK] ScanItem sum-type + CleanAction sum-type + SymlinkPolicy #34

Safety checklist

See .github/ISSUE_TEMPLATE/task.yml — tick applicable invariants in the issue if any destructive path is touched.

Definition of Done

• Acceptance criteria satisfied and verifiable
• Tests added or updated
• No build / lint / test regressions
• Self-review against research-report invariants
• Code review approved