Record an operator board decision as a chained, signed receipt.

The scope gate is enforced upstream by the dashboard-auth middleware (operator scope required for this write); the acting principal arrives on request.state.dashboard_principal. The decision row is appended via EventJournal.resume so it chains onto the verified journal tail and fails closed on a poisoned chain (409).