fix(review-molecule): persist lifecycle state without runner cache

Plan

1. Persist .molecule lifecycle state as a private, short-lived start-job artifact while retaining the cache as an optimization.
2. Download that artifact through the stop job’s existing needs edge and cover the rendered contract.
3. Document cache-independent cleanup and validate the exact merge-request pipeline.

Acceptance criteria

• A stop job receives the matching .molecule state when shared runner cache is unavailable.
• Direct lifecycle-artifact downloads are disabled and .ansible/galaxy_token is excluded.
• Existing scenario-isolation and failed-start cleanup tests pass locally.
• The exact-head pipeline succeeds, including the review-molecule example lifecycle.

Local validation

• bash scripts/tests/review-molecule-artifact-handoff.ci-test.sh
• bash scripts/tests/review-molecule-failed-start.ci-test.sh
• bash scripts/tests/molecule-scenario-state.ci-test.sh
• glab ci lint .gitlab-ci.yml
• git diff --check

Closes #359 (closed)

Blocks xrow-public/infrastructure#56 and infrastructure!59 (closed).