strata_server/checkpoint

One recoverable checkpoint for document state and deletion parent links. Shelf saves through a temporary file and an atomic rename. This protects against process crashes, not power loss on storage without an fsync contract.