Matrix control-plane hardening

Canonical ongoing Matrix-system work for this Discord thread: keep stale/demo tasks out unless explicitly enabled, maintain one live source-of-truth task, improve local bridge heartbeat/execution visibility, and add drift detection.