Record the AAOS-01 audit round: merges, cleanups, donor freeze and the real-window proof

[DTALEX66]

Docs-only follow-up that lands the live ledger's record of this round:

• the audited merge sequence (Advance AAOS desktop UI fidelity and Core capture readback #156 → Measure production multiformat reachability, fix launcher credential identity, publish HTTP contract #157) and the verification of main's CI
• the measured correction of the merge audit's zero-overlap claim, with the merge-tree conflicts
• the Avalonia donor freeze decision and the reuse evidence (path-included lifecycle modules, verbatim icon geometry, copied brand asset)
• the audited branch cleanups with their preservation refs
• the three local real-window attempts, the Tauri-built candidate that proved the historical-Inspector target (23 steps), and the harness limitations
• the vnext-ci worker-environment root cause and its fix

Correction to an earlier claim of mine: main is not unprotected. The classic branch-protection API answers "not protected", but the repository ruleset main-protection is active and requires the a0-gates check with non-fast-forward and deletion protection; every merge in this round was platform-gated and no admin bypass was used. No release; no tags.