feat(P32): deletion-protection-by-default + L2 feature flag (REQ-86, REQ-87)

---ci---
project: acdl
phase: 32
milestone: v1.8
status: execute
---/ci---

- All 11 L1 primitives now have deletion_protection NFR (boolean, default true).
- Adapter emits `lifecycle { prevent_destroy = true }` when NFR is true;
  omits it when false. Default is true when NFR is absent.
- L2 composition resolver propagates inputs.deletion_protection to all
  children NFRs. When false, all resources get deletion_protection=false.
- Stack schema updated with optional features object (deletion_protection,
  uptime_enabled).
- Contract schema description updated to document deletion_protection
  and uptime_enabled inputs.

Tests: +5 (307 -> 312). All pass.

core/contract_resolver.py

@@ -232,6 +232,21 @@ def resolve_l2(contract, registry, repo_root):
         "resources": resources,
     }
 
+    # REQ-87: Propagate deletion_protection feature flag from contract inputs
+    # to all children's NFRs. When inputs.deletion_protection is false,
+    # all resources get deletion_protection=false (used by decommission).
+    deletion_protection_input = inputs.get("deletion_protection", True)
+    if deletion_protection_input is not True:
+        for res in resources:
+            if "nfrs" not in res:
+                res["nfrs"] = {}
+            res["nfrs"]["deletion_protection"] = deletion_protection_input
+    # Also record the feature flag on the stack object for introspection.
+    if "deletion_protection" in inputs:
+        stack_instance["stack"]["features"] = {
+            "deletion_protection": deletion_protection_input
+        }
+
     # P1-7: Process the composition's outputs[] array to build stack.outputs.
     # Each output wire: {"from": "<childId>.outputs.<name>", "to": "stack.outputs.<outName>"}
     # The child_outputs map (childId -> {outputName: resourceId}) resolves