Safer AI assistant batch confirmations

Confirming an AI change batch is now race-safe: two concurrent confirms can no longer double-apply the same steps (the loser gets a clean conflict response). Unchecking every step cancels the batch instead of marking an empty batch confirmed, and writes to mirror collections are now refused in code rather than relying on prompt instructions alone.