Add portable Unicode and supported wheel evaluation

[blisspixel]

Summary

• add the supported-preview sealr.profile.zip.portable-utf8.v1 profile with exact Unicode 16 repertoire, character, case-fold, reserved-name, path, flag, extra-field, and component contracts
• expose a bounded capability-only sealr::wheel evaluator with typed outcomes, evaluator-owned install plans, and source, tree, artifact, plan, and realization identities
• replay the exact 20-wheel corpus through the public evaluator, preserve Alpha.7 historical evidence, and add Unicode, descriptor, parser, topology, and realization regressions
• update Alpha.8 documentation, package contracts, workflows, lockfiles, and target-specific license closures

Why

Alpha.8 closes the next Phase 0.1 trust-gate increment: one portable Unicode archive meaning and one supported consumer that does not reopen the source. This establishes the mechanism needed before broader compatibility evidence, stable API review, authenticated recovery, or new codecs can be evaluated safely.

Verification

• cargo fmt --all -- --check
• cargo clippy --locked --workspace --all-targets --all-features -- -D warnings
• debug and release full-workspace test suites
• Rust 1.98 full-workspace all-target compile and i686 Windows ABI compile
• warning-free Rustdoc
• independent identity verifier and all three wheel report verifiers
• 500-iteration materialization lifecycle and near-limit semantic heap probe
• fuzz and Kani manifest compile checks
• exact 53-file crate package and packaged consumer
• documentation, walkthrough, fuzz, assurance, release-candidate, and license-closure verifiers
• cargo-deny across root, fuzz, Kani, and packaged consumer manifests
• actionlint and PowerShell parser checks
• two independent hostile release reviews and a security diff scan with zero findings