Claim the next eligible backlog row and return a signed claim receipt.

The dependency gate is enforced by :class:ClaimFilter: a row is offered only when its depends_on are all in completed_ids. The granted claim is mirrored into the audit chain via the existing record_task_claim_receipt (no new event type), and the returned receipt embeds that event's chain head so the claim verifies offline. A filter matching no eligible row returns a signed refusal receipt.

Legacy backlog rows retain precedence in the default tenant. Otherwise this route acquires the original tenant-scoped TaskStore row atomically. TaskStore receipts include backlogSource="task_store" and a hash-bound, caller-scoped backlogSnapshot for independent offline verification.