Persist an idempotent portfolio admission operation

Durable control-plane command only. Wallet binding and projection scheduling run later on the dedicated worker.