feat: compile modality-neutral ProofShot evidence

[justinTM]

Summary

• add a versioned, modality-neutral claim/evidence contract with fail-closed validation and explicit proof boundaries/nonclaims
• capture trustworthy terminal outcomes and import ODO CLI matrices without changing ODO JSON or exit contracts
• import browser evidence with source/target/deployment identity, collection health, and privacy-aware redaction
• compile mixed command/file/URL/target/browser evidence into a content-addressed machine manifest, text summary, and accessible no-video viewer
• distinguish wall-clock session duration from probed retained-media duration and link the portable viewer from SUMMARY.md

This PR is stacked on justintm/storyboard-contact-sheet, the fork branch behind upstream PR AmElmo#43, so review can focus on semantic evidence rather than duplicate the open storyboard/contact-sheet work.

Verification

• vitest run: 23 files, 94 tests passed
• tsup: ESM bundles and declarations passed
• exact verified SHA: 45662dceac5d11f1a702561cc3b04a053927dbba
• local ProofShot no-video review at 1280x720 and 390x844: visible keyboard focus, responsive reflow, dark mode, raw manifest/summary access, zero console errors, zero server errors

Boundaries and nonclaims

• the browser review proof exercised a local target only; it does not prove a live or production deployment
• network capture remained not_observed; no clean network claim is made
• the end-to-end browser leg uses the dependency-free trace-fixture importer; it does not claim real production browser behavior
• this does not implement GitLab MR posting; upstream issue Adding GtLab Support for MRs AmElmo/proofshot#22 remains the posting owner
• no package/release publication, deployment, merge, stakeholder acceptance, or cryptographic attestation is claimed

Tracking: archive/oiss-devops#241 with Tasks #242 through #245.

Related upstream work: AmElmo#43 and AmElmo#22.