Implemented operations helper commands for validation, locking, and status

docs/internal/stage-archive.md

@@ -8,7 +8,7 @@ Inputs:
 - session manifest and prerequisite stage records
 - run root contents under `runs/{run_id}/`
 - promotion rules with artifact `source` IDs and archive `dest` paths (`archive.promote_artifacts`)
-- source-based promotion locks (`archive.locks`)
+- effective source-based promotion locks from static config and remote session lock store
 - session-level `previous/**` cache files when present
 
 Outputs:
@@ -37,6 +37,7 @@ Does not own:
 - `pipeline.archive.upload_run`
 - `pipeline.archive.promote_artifacts`
 - `pipeline.archive.locks`
+- `{session_prefix}/locks.yml` loaded by app orchestration before archive execution
 - `pipeline.storage.s3.bucket`
 - `pipeline.storage.s3.root_prefix`
 - `pipeline.workspace.root`
@@ -50,7 +51,8 @@ Does not own:
 - Requires `prepare`, `transcribe`, `merge`, `polish`, `normalize`, `trim`, and `analyze` status `succeeded`.
 - Resolves bucket/prefix from manifest identity first, then config fallback.
 - Uploads session `previous/**` files as durable session state when the local `previous/` directory exists.
-- Skips top-level promotion uploads for sources listed in `pipeline.archive.locks`; run-local uploads still publish.
+- Skips top-level promotion uploads for effective locked sources; run-local uploads still publish.
+- Effective locks are the union of `pipeline.archive.locks` and remote `{session_prefix}/locks.yml`; static pipeline locks win on duplicate sources.
 - Writes metadata including:
   - upload counts/paths
   - `previous_files_uploaded` and `previous_uploaded_paths`
@@ -77,5 +79,6 @@ Does not own:
 - Run upload excludes `audio/` subtree.
 - Session `previous/**` is archiveable durable input/provenance state, not run-local output.
 - Ordinary `--force` does not override archive locks.
+- Malformed or unreadable remote lock store fails archive-capable execution before promotion.
 - `current/manifest.json` uploads before `current/run_id.txt`.
 - `current/run_id.txt` is the remote publish commit marker.