Open, content-addressed cancellation references bound into the pinned AlgoVoi substrate (mandate_ref + cancellation reason; closes the spend-authority lifecycle; L1 frozen)