Make Agent Actions Reversible

Retries cover the action that never landed, and idempotency covers the one that landed twice. Neither helps when an action landed once, executed correctly, and was wrong. That third case needs a compensating action, designed before the first write runs.