Add semantic telemetry, Operation Red, and ProofVault workflows

[nativ3ai]

Summary

• adds the typed h1dr4.telemetry.v1 contract and projects verified H3RETIK evidence into Sibyl entities, loot, rooms, relationships, posture, and dashboard feeds
• adds local agent identity and encrypted signed workspace envelopes
• adds immutable Operation Red scope, approval, funding, schedule, dispatch, verification, and report state primitives
• adds ProofVault report encryption, owner key rewrap, contract source, compiled artifact, deployment tooling, and reproducible-build attestation
• restores the complete operator dashboard, architecture view, and developer docs

Verification

• 54 Python tests pass
• Ruff passes
• ProofVault compiles with solc 0.8.33
• all 20 EVM scenario checks pass
• two clean builds reproduce source, creation-bytecode, runtime-template, and artifact hashes
• source contains no local Sibyl databases, credentials, node_modules, build outputs, or target demo artifacts

Current boundary

Operation Red dispatch remains a control-plane state transition and assignment plan. It is not yet wired to automatic H3RETIK worker execution, receipt verification, email delivery, or automatic cloud-to-Sibyl streaming. ProofVault encryption is not a claim of validator blindness because the validator can decrypt submitted reports. The dashboard source matches the previously built snapshot; a fresh npm install was blocked by local disk capacity.