Prevent and sweep leaked E2E resources

[isaacroldan]

Why

Failed E2E runs can leave apps and development stores behind. The PR cleanup job did not fail when resources remained, and there was no scheduled cleanup for older leaks.

What

• Restrict cleanup to verified current or legacy E2E resource names.
• Add age-bounded cleanup and verification modes to the app and store scripts.
• Fail PR cleanup when current-run resources remain.
• Add a daily sweep for E2E resources older than 24 hours.

Testing

• pnpm --filter e2e lint
• pnpm --filter e2e type-check
• pnpm --filter e2e exec playwright test tests/resource-ownership.spec.ts --project local
• pnpm --filter e2e exec playwright test --project local
• Parsed both changed workflow files as YAML.