feat: per-connection publish governance — auto, 1-admin, majority, consensus

Per the owner's spec: each social connection gets publishGovernance in its
fields — unset = manual publish (today), auto = dispatch on approval,
admin1/admin_majority/admin_consensus = a publish-phase chatgov poll
(subject draft_publish, its own open-poll slot, no collision with review
gates). Dispatch holds until the publish poll passes (E3 pre-dispatch
check); auto dispatches on approval. Includes migration 033, the PATCH
/connections/:id/publish-governance route (chatgov.manage), and 19+31 new
tests. Implementation by the branding-panel process (claude/opus), lint
and integration fixes here.

infra/occupymedia/edge/docker-compose.edge.yml

@@ -11,6 +11,7 @@ services:
       - ./nginx.conf:/etc/nginx/nginx.conf:ro
       - /opt/occ-brand:/opt/occ-brand:ro
       - ./hub-sso:/opt/hub-sso:ro
+      - ./hub-chat-auth.css:/opt/occ-chat-brand/hub-chat-auth.css:ro
       - ./certs:/etc/letsencrypt:ro
 
 networks: