fix(controller): gate project readiness on workloads

[orga-agent]

Summary

• derive Auth, REST, Studio, Meta, Gateway, and PowerSync readiness from observed current-generation Deployment rollout state
• keep SupabaseProject in Provisioning with aggregate Ready=False while a core workload is pending
• clear stale aggregate readiness when core service reconciliation fails, while preserving and returning the component error
• report observed available replica counts and document the resulting status contract

Verification

• make test
• go test ./...
• go test -race ./internal/controller -run 'Test(Reconcile|DeploymentIsReady)' -count=1
• go build ./...
• make lint
• make test-tanka
• make test-delivery
• generated CRD copies remain identical
• git diff --check

Review

• whole-spec Standards and high-risk Spec review completed
• fixed stale aggregate Ready=True on core-service failure
• post-fix $review-again: focused verification; no remaining blockers or judgement calls

Deployment

This PR does not deploy or publish the operator image. Release and rollout remain separate steps.