chore(release): prepare beta-17

[jeremi]

Summary

• prepare Registry Stack beta-17 as v0.13.0 from current origin/main
• update workspace versions, lockfiles, release metadata, release notes, OpenAPI versions, installers, starters, and versioned documentation
• repair the Nightly Security Notary fuzz inventory and add a drift contract test

Release boundaries

• manifest status remains release-candidate
• source refs remain bound to the preparation base until promotion-commit finalization
• Solmara repinning and hosted publication remain held until immutable v0.13.0 image digests exist

Verification

• release planner: ready, 10/10 checks
• release tooling: 188 tests passed
• CI change contracts: 9 tests passed
• cargo fmt, metadata, check, clippy, deny
• selected Rust package tests, including refreshed deterministic Registryctl input digest
• docs unit suite: 117 tests passed
• full docs check: 11 docsets, SEO, 597143 built links/assets
• schema, OpenAPI, source-model, image-contract, import, and Debian 13 release gates
• git diff --check

Signed-off commit: e805085