remi: prove static compatibility for every supported target

[TusanHomichi]

Closes #573
Refs #517

Summary

• add strict, deterministic TargetCapabilityContractV1 authority for the exact Fedora 44, Ubuntu 26.04 LTS, and Arch target set
• statically preflight independently verified CCS v3 authority across target architecture/syscall ABI, native lifecycle engines, lifecycle interfaces, file capabilities, repository enrollment, and a closed Linux process-capability vocabulary
• hard-cut the full conversion crawl to RemiConversionCrawlV3; every successful artifact now carries exact ordered target proofs bound to its CCS SHA-256 and each target-contract SHA-256
• keep selected-root paths and live executable/manager handshakes under install-time HostCapabilityInventory preflight

Verification

Focused and owning proof:

• cargo test -p conary-core target_contract --lib — 6 passed
• cargo test -p conary-core corpus::failure --lib — 9 passed
• cargo test -p remi conversion_crawl --lib — 10 passed
• cargo clippy -p conary-core -p remi --all-targets -- -D warnings
• bash scripts/agent-context.sh --feature remi --run focused — 12 commands passed
• cargo test -p conary-core — 3,741 library tests passed, 5 ignored; integrations and doctests passed
• cargo test -p remi — 731 library, 5 binary, and 4 CLI tests passed; doctests passed with 2 ignored

Repository gates:

• cargo fmt --check
• bash scripts/check-doc-truth.sh
• cargo clippy --workspace --all-targets -- -D warnings
• cargo test --workspace --exclude conary-test
• cargo test -p conary-test — 325 library and 14 binary tests passed, 2 ignored
• cargo run -p conary-test -- list

All 32 hosted checks passed on exact head 22b27550fd4ce9babb96a550ea7eabb307be4567. The hosted native-pm-parity jobs remain release tests and are not claimed as the Slice 6 full-universe parity oracle.