fix: publish complete local monitoring evidence

[Jammy2211]

Summary

Close the local-to-published monitoring gap. Export all observed monitoring families, including manifest/workflow drift, URL hygiene and PyPI floor checks. Preserve complete findings and original evidence timestamps. Missing, expired and malformed evidence stays unresolved; cloud measurements take precedence.

Closes #270.

API Changes

Additive public observation fields and fallback coverage. Existing release verdicts and gates are unchanged. Missing legacy inventories remain unknown until republished.

Test Plan

• Heart suite: 1177 passed.
• Tenant firewall: passed.
• Local-to-published round-trip tests: missing families, cloud precedence, privacy, malformed inventory and missing/expired timestamps.
• Real cached snapshot replay: 16 exported families; previously omitted families present; release verdict unchanged.
• Scientific workspace smoke: not applicable; no library or workspace API changes.

Heart readiness

Human acknowledged these exact YELLOW reasons on 2026-10-02: "do that i authorise".

• manifest drift: organism-map blocks (generated) — 1 mismatch(es) vs PyAutoMind/repos.yaml
• manifest drift: public front-door organ tables (generated) — 1 mismatch(es) vs PyAutoMind/repos.yaml

No RED blockers. STALE: release validation incomplete: no rehearsal for current source. This is a development PR; no release or merge is authorized by this acknowledgement.

Generated by the PyAutoLabs agent workflow.