Bounded public facility and decision write latency

Public facility and decision-memo writes now run under a tight latency budget with a structured timeout fallback, so a single slow Supabase call cannot pin the request thread. Surfaces a fast 503 instead of a hung connection.