feat: publish portable mission runtime and sync boundary

[jcarlosrodicio]

Summary

• Publish the portable mission runtime and loop status contracts.
• Add public-boundary checks to keep private providers, credentials, endpoints, local paths, and runtime evidence out of the public kit.
• Harden installation/package smoke coverage and package provenance.
• Add a native tool-path performance baseline before considering Rust.

Validation

• ./scripts/check.sh passed.
• Public git diff --check passed.
• Pi adapter tests passed: 258 passed, 1 skipped.
• Pi preflight and check passed with no issues.

Local Pi status

The Pi sync was not applied. sync --dry-run stopped safely with check_persist_collision_failed because an existing local manifest staging entry was present. No local staging state was deleted or forced, and no Pi parity is claimed by this PR.

Review scope

This PR targets the public master branch. It does not include private providers, credentials, private MCP wiring, local paths, or raw runtime evidence.