feat: complete remaining Conductor work

[edithatogo]

Summary

• implement the portable fail-closed FOI-O editorial workflow and privacy-conscious evidence receipts
• mirror, verify, close, and archive the FOI-O remediation track
• record verified Codecov OIDC evidence and the exact owner-only Renovate authorization blocker
• reconcile 33 tracks and 132 native phase issues in Project 36

Verification

• npm run sync
• npm run validate
• npm run lint:all
• npm run test:coverage
• npm audit --audit-level=high (0 vulnerabilities)
• npm test (79 tests passed plus integration checks)
• npm run validate:conductor
• live hosted reconciliation was clean before the GitHub GraphQL rate limit was exhausted

External gate

Renovate App installation still requires repository-owner UI authorization at https://github.com/apps/renovate/installations/new. Dependabot remains enabled until a Renovate-authored Dashboard or PR proves health.

Closes #61. Relates #234 and #236.

[cursor]

Bugbot is not enabled for your account, so this pull request was not reviewed.

Enable Bugbot in the Cursor dashboard to get automatic reviews on future PRs.

[Copilot]

Copilot was unable to review this pull request because the user who requested the review has reached their quota limit.

[amazon-q-developer]

This PR successfully implements the FOI-O final editorial workflow and completes the remaining Conductor work as described. The implementation is clean and follows established patterns.

Key additions:

• Privacy-conscious evidence receipt system with cryptographic hashing for manuscript editing
• Fail-closed workflow with protected item validation (citations, numbers, qualifiers, legal boundaries)
• Comprehensive test coverage for receipt generation and protected item detection
• Clean integration with the existing skill compilation system
• Complete documentation and track reconciliation (33 tracks, 132 phases)

The code is production-ready with no blocking issues identified. All verification steps mentioned in the PR description should pass successfully.

---

You can now have the agent implement changes and create commits directly on your pull request's source branch. Simply comment with /q followed by your request in natural language to ask the agent to make changes.

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.

📢 Thoughts on this report? Let us know!