[Liebmann5]

Lets a user point AA's automation at specific hiring platforms, safely and visibly.

• Planner: deterministic site-restricted planning through the catalog's composer; only measured/vendor-verified platforms are planned (Jobvite today). Off by default; with nothing configured, automated URLs are byte-identical.
• Safe execution: session-wide query budget; one per-host pacer for engines and hiring-platform hosts; an engine that returns a CAPTCHA or login wall is stopped for the session before any further request; site-restricted harvests keep their own degradation baseline; off-shape hits dropped or routed and counted.
• Provenance: each job stores provider, query, platform, engine form, route, page and rank; the results CSV shows them. Behind consent, a sampling-frame table records engines/platforms searched (never query text). Research schema 5, consent 2.7.
• Surfaces: platform choice in both wizards, a profile default and an admin lock; a plan preview (GUI button, CLI confirm step, --print-plan); --platforms; the outcome (stopped engines, dropped results, budget skips) on both results screens.
• Docs: ADR-020, user guide, configuration, architecture, CLI reference, glossary, STATUS.

Not yet proven on a live run. Tests: 2537 passed, 5 skipped, 1 xfailed.

[sourcery-ai]

Sorry @Liebmann5, your pull request is larger than the review limit of 300,000 diff characters