fix: never publish a missed schedule, refuse trashed posts, fail on meta read errors

- PostGuard::editable() refuses trashed entries unless the caller opts in
  (content-get, revisions-list, post-trash); publish/schedule/unpublish/update/
  restore/duplicate/replace now refuse them.
- PostGuard::statusStable(): content-update, revision-restore and
  replace-with-copy refuse a future post whose date has passed (any save would
  publish it); the content-update rollback and PostCloner row writes re-check.
- PostCloner::ownMeta() treats a failed SELECT as an error; replace() reads the
  copy before its first write.
- replace-with-copy needs create_posts (backup clone) and reports backup_id in
  write_failed/partial_write.

Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01At3V6SjwbMe6eMzVGW3Hs7

tests/Unit/Integrations/WordPress/Status/PostScheduleAbilityTest.php

@@ -52,6 +52,16 @@ final class PostScheduleAbilityTest extends TestCase
         self::assertStringContainsString('2099-06-01 09:30', $result['summary']);
     }
 
+    public function testATrashedPostIsRefused(): void
+    {
+        Functions\when('get_post')->justReturn(new WP_Post(['ID' => 5, 'post_type' => 'post', 'post_status' => 'trash']));
+        Functions\expect('wp_update_post')->never();
+
+        $result = $this->ability(Mockery::mock(ChangeLog::class))->execute(['post_id' => 5, 'date' => '2099-06-01 09:30']);
+
+        self::assertSame('lit_validation_failed', $result->get_error_code());
+    }
+
     public function testPastAndImpossibleDatesAreRejected(): void
     {
         Functions\expect('wp_update_post')->never();