Resolve a close blocker with server-verified evidence

Marks a close_blockers row resolved. Warn-severity blockers accept a plain acknowledgement. Block-severity blockers resolve only when the server re-verifies the evidence itself (#1911): an applied/rejected transfer match for the pair, both legs categorized to Transfer Clearing (1080) netting to zero, an explicit not_a_transfer disposition (persisted as a rejected transfer match so the audit never re-raises the pair), or a live clearing balance of exactly zero. Block-severity resolves require notes of at least 10 trimmed characters and record the resolving user. A clearing_residual blocker (GL integrity I23) resolves only as an acknowledgement (J-358): notes of at least 10 trimmed characters as the reason and a reviewAfter date later than today. I23 re-surfaces it on that date and opens a new blocker when the residual changes. Other kinds reject reviewAfter.