feat: add generic queue and subscription retirement

sdk/go/examples/resource-lifecycle/README.md

@@ -0,0 +1,16 @@
+# 队列和订阅的通用退役示例
+
+用途：为一次独立回归创建专属空队列和订阅，然后退役订阅、重报原操作验证幂等、退役队列。不会提交任务，也不会修改现有队列或任何业务凭据。名称随机生成，没有行业或接入方约定。
+
+需要已部署迁移 000034 的 Orbit、`queues:manage/queues:read/events:manage` 权限及允许创建新队列的范围。配置 `ORBIT_URL` 和 `ORBIT_TOKEN`，或使用 `ORBIT_CREDENTIALS_FILE` 引用自己的 SDK 凭据文件。
+
+```sh
+cd sdk/go
+export ORBIT_URL=http://127.0.0.1:18080
+export ORBIT_CREDENTIALS_FILE=/absolute/path/to/sdk.credentials.json
+go run ./examples/resource-lifecycle
+```
+
+预期输出只有本次资源 ID，以及 `retired=true history_preserved=true subscription_replay=true`。控制台仍能查询历史，订阅不再占活动名额。
+
+若中途失败，示例以非零状态退出；保留已经打印的 ID，按[退役规则](../../../../docs/api/resource-retirement.md)核查并收尾。生产部署应持久保存每条退役命令的幂等键、目标及原请求，网络不明确时重报同一条命令。

sdk/go/examples/resource-lifecycle/main.go

@@ -0,0 +1,77 @@
+// resource-lifecycle 创建并退役本次独占的空队列与订阅，不处理任何现有资源。
+package main
+
+import (
+	"context"
+	"crypto/rand"
+	"encoding/hex"
+	"encoding/json"
+	"fmt"
+	orbit "git.yuntuo.hk/k2safe/orbit/sdk/go"
+	"os"
+	"time"
+)
+
+func main() {
+	if err := run(); err != nil {
+		fmt.Fprintln(os.Stderr, err)
+		os.Exit(1)
+	}
+}
+func run() error {
+	token := os.Getenv("ORBIT_TOKEN")
+	if path := os.Getenv("ORBIT_CREDENTIALS_FILE"); token == "" && path != "" {
+		raw, err := os.ReadFile(path)
+		if err != nil {
+			return err
+		}
+		var c struct {
+			Token string `json:"token"`
+		}
+		if err = json.Unmarshal(raw, &c); err != nil {
+			return err
+		}
+		token = c.Token
+	}
+	client, err := orbit.NewClient(os.Getenv("ORBIT_URL"), orbit.Options{Token: token})
+	if err != nil {
+		return err
+	}
+	ctx, cancel := context.WithTimeout(context.Background(), 20*time.Second)
+	defer cancel()
+	var random [16]byte
+	if _, err = rand.Read(random[:]); err != nil {
+		return err
+	}
+	runID := hex.EncodeToString(random[:])
+	q, err := client.CreateQueue(ctx, runID+"-queue", orbit.CreateQueueRequest{Name: "lifecycle-" + runID, MaxConcurrency: 1, RatePerSecond: 10})
+	if err != nil {
+		return err
+	}
+	fmt.Printf("queue=%s\n", q.Queue.ID)
+	sub, err := client.CreateSubscription(ctx, runID+"-sub", orbit.CreateSubscriptionRequest{Name: "lifecycle-" + runID, QueueID: q.Queue.ID})
+	if err != nil {
+		return err
+	}
+	fmt.Printf("subscription=%s\n", sub.Subscription.ID)
+	in := orbit.RetireResourceRequest{ExpectedRevision: sub.Subscription.Revision, Reason: "isolated lifecycle example completed"}
+	if _, err = client.RetireSubscription(ctx, sub.Subscription.ID, runID+"-retire-sub", in); err != nil {
+		return err
+	}
+	replay, err := client.RetireSubscription(ctx, sub.Subscription.ID, runID+"-retire-sub", in)
+	if err != nil {
+		return err
+	}
+	if !replay.Deduplicated {
+		return fmt.Errorf("retirement did not preserve operation identity")
+	}
+	retired, err := client.RetireQueue(ctx, q.Queue.ID, runID+"-retire-queue", orbit.RetireResourceRequest{ExpectedRevision: q.Queue.Revision, Reason: "isolated lifecycle example completed"})
+	if err != nil {
+		return err
+	}
+	if retired.Queue.RetiredAt == nil {
+		return fmt.Errorf("queue retirement missing")
+	}
+	fmt.Println("retired=true history_preserved=true subscription_replay=true")
+	return nil
+}