Keep a person's retirement decisions out of healer-wanted

Approving a retirement and deleting what was retired are a person's act by
design (hq ADR 0230); counted by S15 they would ask for a healer that must not
exist.

cmd/mesh-controller/signals.go

@@ -571,12 +571,21 @@ func watchLease(f *signalFacts) []conditions.Observation {
 // handActsWithin is how far back a repeated cause counts (S15).
 const handActsWithin = 14 * 24 * time.Hour
 
+// personsDecision are the causes of hand acts that are a person's decision by design, never a repair a
+// healer could take over: approving or rejecting a retirement, and deleting what was retired (novox/hq
+// ADR 0230 — nothing is retired past the bound or deleted without a person). Repeated, they are the
+// mesh working as decided, not a healer wanted.
+var personsDecision = map[string]bool{kindRetireWaiting: true, kindCleanupWaiting: true}
+
 // watchHandActs is S15: a cause recorded by hand twice within a fortnight is a healer wanted, named by
 // the cause. **A heal is never a hand act** (healers.go), so a cause a healer exists for and a person
 // still repaired twice says the healer is not enough — its reach or its budget — and is said so.
 func watchHandActs(f *signalFacts) []conditions.Observation {
 	recent := make([]link.HandAct, 0, len(f.handActs))
 	for _, a := range f.handActs {
+		if personsDecision[a.Cause] {
+			continue
+		}
 		if f.now.Sub(a.At) <= handActsWithin {
 			recent = append(recent, a)
 		}