Receipt Ledger

Persistent provenance for every successful REE execution.

Receipts are saved when a new replay finishes; earlier local receipt files are not backfilled automatically.