Commitment cancellation capability

Additive local development capability for integral issued-order cancellation. Does not replace or modify the installed budget-control or payables artifacts, and is not installed in SGF.

The host must hold its company lock, authenticate an independent finance actor, validate the published policy, confirm absence of receipts/invoices/payments and open the encompassing transaction. The writer appends a reversal of the original wholly available commitment in the canonical budget_entries ledger. The host binds the reversal entry to its decision in the same transaction and audit.

MZN only. Verify source SHA-256 against config/order_cancellation.php before execution. No transport, bank operations, invoice cancellation, partial cancellation, activation or grants. The capability is disabled in the local pilot; validation uses disposable databases.