feat(runtime): harden daily pipeline audit and verification

Tighten real-ingestion success rules, separate scheduled reports from historical rebuilds, and persist source-level runtime audit across daily pipeline runs.

Also add the Phase 5 CI workflow contract plus verification updates and supporting docs so the full uncommitted change set can be validated together.

scripts/rebuild_historical_report.sh

@@ -21,4 +21,8 @@ if [[ -f ".env" ]]; then
   source ".env"
 fi
 
-REPORT_DATE="$REPORT_DATE" go run -tags llm_script ./scripts/generate_daily_report.go "$@"
+REPORT_DATE="$REPORT_DATE" \
+REPORT_RUN_KIND="historical_rebuild" \
+REPORT_TRIGGER_SOURCE="rebuild_script" \
+REPORT_IS_OFFICIAL_DAILY="false" \
+go run -tags llm_script ./scripts/generate_daily_report.go "$@"