fix(holoindex): project owner evidence to repository paths

[Foundup]

Summary

• project HoloIndex owner evidence to repository-relative paths before receipt and RedDog use
• make the checked-in machine JSON the complete executable response contract with fail-closed structural/rule compilation
• scrub every failed owner response, include work-ledger hits, reject ambiguous ADS-shaped locations, and frame indexed text as untrusted evidence
• bump RedDog to 0.4.100 and content-bind the 1,333-file backend closure

Validation

• 230 focused tests passed, 1 platform skip, 20 subtests
• exhaustive RedDog extension contract passed
• 18 shards / 6,893 source lines / 1,216 assertions reconstructed
• Ruff, git diff --check, deterministic manifest check passed
• independent exact-SHA security review: GO
• independent exact-SHA integration review: GO

Truth boundary

• no query-time reindex
• no signer, queue, shell, worktree, merge, or execution authority added
• OpenRouter Fusion internal role prompts remain opaque and are reported as unobservable
• governed HoloIndex refresh is required after merge