feat(adaptive): govern dormant support profiles

[thinksyncs]

Summary

• Add reviewed, complete dormant support-profile set governance without advertising availability.
• Reuse one loader-derived eligibility provider in recommendation and execution preflight.

Changes

• Add the dry-run-by-default review-image-pipeline-support-profiles CLI, canonical proposal schema, bounded append-only loader, and atomic review service.
• Revalidate lifecycle-pinned historical support-profile snapshots immediately before runner resolution.
• Synchronize source and packaged manifests, schemas, README/SSOT/manual/report content, generated references, and CI coverage.

Testing

• bash scripts/pre_push.sh
• .venv/bin/python -m unittest tests.test_installed_ai_surface
• .venv/bin/python -m unittest tests.test_candidate_artifact_ai_surface
• python3 tools/audit_manual_cli_drift.py --json
• python3 tools/audit_docs_examples_drift.py --json
• git diff --check

Notes

• The canonical support-profile stream remains empty. This change does not bind a runner, activate evidence, change lifecycle or maturity, or claim that any adaptive model is currently supported.
• Tracks Bead YOLOZU-ll2.81.3.8.