Harden publication and withdraw unresolved historical data

[Codewriter90x]

What changed

• hardens coordinate-quality reporting, typed JSON validation, deterministic
  geography builds, workflow pinning, dependency auditing and Python 3.14
  compatibility;
• expands GitHub Pages with indexable municipality/province pages, stricter
  internal-link and payload validation, and clearer GeoNames coordinate
  semantics;
• withdraws all pre-clean-room data whose provenance and redistribution rights
  could not be established;
• removes legacy inputs, v1 baselines, derived comparison reports and obsolete
  legacy tooling;
• replaces the previous-release baseline with the clean-room v2.0.0 dataset.

Why

Green structural checks did not certify the factual accuracy of GeoNames
coordinates or establish rights over the historical pre-clean-room material.
The current pipeline now distinguishes those concerns and no longer
redistributes the unresolved material.

The public Git history was rewritten before this PR so the withdrawn paths and
pre-clean-room data blobs are no longer reachable from public branches.

Validation

• 55 Python tests;
• 9 JavaScript tests;
• Ruff and mypy;
• 85% Python coverage;
• deterministic two-build comparison;
• typed JSON schema validation for 18,811 rows;
• reproducible ISTAT geography rebuild;
• validation of 8,030 Pages documents and payload budgets;
• release build and SQL/SQLite equivalence;
• dependency audit with no known vulnerabilities;
• immutable GitHub Action reference check.

Release follow-up

After merge, v2.0.0 will be repointed to the merged clean-room commit and its
release assets/notes will be updated. Data assets attached to v1.0.0 and
v1.1.0 will be withdrawn.