chore: public logic hardening wave (infra audit)

[VontaJamal]

Summary

• execute infra hardening wave audit for existing public logic only
• add and finalize /docs/audits/public-logic-audit-2026-02-22.md
• validate docs/path parity and all core CI script contracts used for public release surfaces

Fixes / Hardening Applied

• documented full command matrix and findings in audit artifact
• validated deterministic manifest behavior and guard scripts

Validation

• docs local path parity scan: pass
• python3 scripts/ci/validate_readmes.py: pass
• python3 scripts/validate_shop_catalog.py: pass
• python3 scripts/build_armory_manifest.py: pass
• python3 scripts/ci/check_manifest_determinism.py: pass
• python3 scripts/ci/secret_hygiene.py: pass
• python3 scripts/ci/validate_trust_store.py: pass

Audit Artifact

• docs/audits/public-logic-audit-2026-02-22.md

No New Feature Attestation

• This PR is maintenance and quality-control only.