fix(status): narrow TW03 publication artifacts

[scarmani]

Summary

• follows up closed PR docs(status): refresh B0 proof surface #8704 as a rebased replacement on current origin/main
• keeps the TW03 preflight exception narrow by staging only docs/status/generated/rescue_productization/latest.json and top-level rescue-productization-YYYYMMDDTHHMMSSZ.json files in the benchmark-truth publication workflow
• adds a workflow contract test so the publisher cannot go back to committing the whole rescue-productization generated directory

Root cause

PR #8704 made scripts/automation_pr_preflight.sh allow the canonical TW03 proof-surface JSON files, but .github/workflows/benchmark-truth-publication.yml still staged the entire docs/status/generated/rescue_productization directory. A TW03 refresh could pass only by letting broad generated directory content through review.

Validation

• bash scripts/automation_pr_preflight.sh origin/main HEAD
• python3 -m pytest tests/scripts/test_benchmark_truth_publication_workflow.py tests/scripts/test_automation_pr_preflight.py -q
• python3 -m pytest tests/scripts/test_publish_rescue_productization_report.py tests/scripts/test_render_rescue_productization_status.py tests/benchmarks/test_rescue_productization.py::test_render_status_markdown_round_trips_non_empty_payload tests/benchmarks/test_truth_surface_consistency.py::test_tw03_rescue_productization_status_matches_latest_report_json -q
• parsed workflow commit step checked with bash -n