use Durable objects for governance

[turadg]

What is the Problem Being Solved?

Governance state must survive vat upgrade.
For MainNet 1, we intend to support durable objects for restart and upgrade.

However, @Chris-Hibbert has determined that we can make upgrade work without durability because we store the outcomes of votes that affect parameter values. Since #5678 the parameter changes are recorded off-chain. So while this is important it's not a 1.0 launch blocker.

Description of the Design

Convert Virtual objects #4343 to Durable.

Security Considerations

Trust of statement management by storage system and disk.

Test Plan

Use new durability tester h/t @FUDCo

[FUDCo]

The tester issue is #4997

[aj-agoric]

Hello @FUDCo I am looking to assign this ticket to someone for the sake of tracking. Would you be the correct choice?

[Chris-Hibbert]

I'm already working on this. I'll change the assignee.

[aj-agoric]

thanks @Chris-Hibbert

[dckc]

After upgrading vaultFactory, voteOnParamChanges failed (2024-08-23T15:05:58.783Z in emerynet logs).

A slog visualization slog.svg shows v41 (zcf-b1-9f877-vaultFactory.governor) receives a vat terminated rejection.

It looks like the resolution of E(creatorFacet).getParamMgrRetriever() from here is not durable:

agoric-sdk/packages/governance/src/contractGovernorKit.js

Lines 112 to 117 in ba3b776

	provideParamGovernance() {
	if (!paramGovernance) {
	const { timer } = powers;
	const { creatorFacet, instance } = this.state;
	paramGovernance = setupParamGovernance(
	E(creatorFacet).getParamMgrRetriever(),