feat(support): add operability evidence surfaces

[seonghobae]

Scope

This Draft preserves the reviewed support/operability delta: add gateway readiness and Prometheus text to the support bundle; expose /readyz and /metrics endpoint contracts in the buyer evidence manifest; and pin the bundle-to-live endpoint contract with integration coverage. The evidence manifest identifies endpoints while live payloads remain in GET /api/support-bundle.

Protected prerequisite repair — 2026-09-05 KST

The former base #153@b663f9d200e5f385c7dd067d074940a02836c68e is superseded. Its valid hosted-runner/workflow foundation was carried forward and is now protected truth through #159 at main@5829a0f08d78de464dd24393ce5d0f25fba9d126.

Fresh comparison of the old feature head against #153 proved the unique support delta is exactly six non-workflow files: CHANGELOG.md, README.md, crates/waf-ids-core/src/lib.rs, docs/commercial/20b-krw-sale-readiness.md, docs/commercial/buyer-due-diligence.md, and src/lib.rs. The branch's inherited CI/Fuzz/Scorecard changes and workflow-runner regression belonged to the old prerequisite, not this feature.

The feature was therefore rebuilt non-destructively at exact 6b9cb5bd88b8e4082e39af9b4f47149fcf8a984d, preserving prior head 76037b8ae206ace8dab0e6622dfc9fc88c57deb3 and live protected main as parents while constructing the merged tree from protected #159 truth plus only those six unique feature blobs. The PR is retargeted to main. No force push, destructive rebase, workflow ownership copy, or valid feature delta loss occurred.

All predecessor check/review conclusions are historical after this real base repair. Current exact-head repository/security/coverage/central review/thread/governance evidence must be reacquired. Keep Draft until one unchanged exact head is terminal-valid; no self/model approval, feature-branch final merge, routine bypass, gate weakening or predecessor-evidence reuse.

[coderabbitai]

Important

Draft PR not reviewed

Draft PRs are not automatically reviewed by default.

• Trigger a manual review

To automatically review draft PRs, update your CodeRabbit configuration:

reviews:
  auto_review:
    drafts: true

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}