fix: complete foundation B contracts and native compatibility

[ANRCM0]

Queued Runtime publication could hold an execution snapshot into the Agent renewal window, populated Audit filters could miss linked events, and Probe plans could reject valid expiry values stored as MySQL JSON unsigned integers. Keep the existing owners and transactions, honor the renewal lead, join Audit dependencies directly with stable deduplication, reclaim notification admission on cancellation, and append migration 0038 for the narrow expiry CHECK repair (FR-0026/0027).

UpgradeAssessment interface 2 adds an explicit reviewed 0038 Control profile. All 26 older profile ceilings, Agent release profiles, existing aliases and plan/report payload version 1 remain. Unknown or altered markerless SQL refuses; the reviewed CHECK-only entry does not claim full schema equivalence. Native lower/source representation changes from A5 retain their documented migration boundaries.

B reconciles all 220 readiness requirements with durable assertions and applicable exact-source execution across 406 evidence sources. Coverage includes original transactions, locks, rollback/competition, error/receiver/default/cancellation order, public/native/legacy identity, wire assets, Windows execution, macOS refusal and the public extension. Temporary repository JSON, 238 scratch files and four artifact directories were moved out of the workspace and temporary directory into a recoverable archive; redundant failure chronology is condensed. Durable suites, migrations, fixtures, contracts, FRs and protected history remain.

Validation:

• Frozen source e208a3a, actual PR test checkout c3ce8a6: baseline 39341589653 and packaging 39341589509 succeeded, with all 11 jobs and every applicable named step passing. Contracts 1946 TypeScript passes/0 failures/143 database-conditional skips, Web 153/153, boundary negatives 18/18; the separate native MySQL job reports no skipped test cases.
• Final documentation/acceptance head b9d6d5f, actual PR checkout c4ed2cf, tree 7ae7b773276ce0fb8d081b3aaa1a05c165ebb5ca: baseline 39344889784 and packaging 39344889830 succeeded. All 11 jobs and every applicable named step passed, with no workflow step skipped. The final native MySQL job reports zero test skips/failures; full 3/4/8-node browser/namespace, Windows, macOS refusal and non-publishing packaging passed. Production, test and tooling files are unchanged from the accepted source; this is a verified documentation successor.
• Local checks are static only; functional, MySQL, network, browser and container runs use Actions.

The bounded B decision permits later authorized modules to consume the frozen accepted public contracts or a separately verified successor. No C product feature or release is included. Independent physical hosts, long-run/load, standalone Responder delivery, image publication and production gates remain separate. PR merge requires its own authorization.