PHLEGM v6 recursive End-User clone source fix

Clone source contract:
  ./**/<project>/  ->  ../../<project>/

The End-User clone no longer assumes the project payload directory is directly
at the archive root.  Each passing archive is extracted safely, the unique
recursive <project>/ payload root is resolved, its contents are conflict-checked
into the matrix union, and that union is merge-copied to the existing live
install. Destination-only files are preserved. Added/replaced files are SHA-256
verified after copy. Multiple recursive project roots are rejected as ambiguous
before the live destination is modified.
