cms-draft-handofflisted

# Hand off a private draft to CMS ## Purpose Send an approved article package to Flexim as a private draft without publishing, then prove by full read-back that CMS preserved the intended copy, relations, and metadata. A mutation is complete only after verification; update Suggested Topic last. ## Responsibility `cms-draft-handoff`: - verifies explicit authorization for a private draft mutation; - reads current schema before building the payload; - prevents duplicates and ambiguous overwrites; - creates a new draft or partially updates one unambiguous draft entry; - reads the full entry after mutation and compares it; - marks a linked Suggested Topic `done` only after successful article verification; - returns an external report and exact CMS entry ID. It does not publish, archive, or delete; change reader Markdown or locked meaning; invent author, category, slug, date, SEO metadata, or media IDs; upload images without a separately authorized media handoff; repair an unready package in CMS; or delete a partially created draft as rollback. ## Inputs and priority Use: 1. explicit permission to create or update a private draft; 2. a `ready` `final-integration-check` package and `ready` `cold-reader-review` report for the same final reader-visible surface; 3. exact CMS payload with collection, name, content, status, relations, metadata, and H1 decision; 4. locked reader Markdown and snapshot; 5. expected counts for headings, links, tables, code fences, and media; 6. Sugg