Expose archive freshness and dependency-audit evidence

[NouraldinFarge]

Summary

• makes archive freshness visible in the repository, generated project site, and automated regressions
• preserves the dated-source boundary while exposing the 2026-07-28 snapshot age, six supported archives, and four documented coverage gaps
• adds a locked-graph dependency-audit workflow plus current JavaScript, Python, and Rust evidence
• strengthens site data presentation, accessibility, documentation checks, and recruiter-facing maintenance guidance
• keeps the packaged analysis evidence explicit that historical patterns must not be used to choose lottery numbers

Verified locally

• pnpm install --frozen-lockfile and pnpm verify
• 27 Vitest tests across 6 files
• site build, format, lint, typecheck, and documentation checks
• cargo fmt --all --check, strict Clippy, and 14 Rust tests
• Ruff, mypy, and 18 Python tests
• JavaScript, Python, and Rust vulnerability audits: no known vulnerabilities
• 17 inherited RustSec informational warnings are documented precisely: 12 GTK/macro-chain warnings absent from the Windows target and 5 legacy Unicode crates reachable through Tauri's urlpattern chain
• current main CodeQL run 32905518136 succeeded and alert chore(deps-dev): update pytest requirement from <9,>=8.4 to >=8.4,<10 in /engines/drawscope-engine #1 is fixed, not dismissed

Data boundary

The bundled archive snapshot is dated 2026-07-28 and now reports freshness as needing attention rather than implying it is current. Issue #15 should remain open until approved-source refreshes close the documented gaps. This PR does not scrape restricted sources, claim predictive value, create a release, or modify any tag or release asset.