chore(steward): reconcile plan-marshall provisioning stamp to 0.1.1571 (#239)

## Summary

Post-change reconciliation run via `/marshall-steward upgrade` (consumer
project, all four stages).

The only tracked change is the plan-marshall provisioning stamp in
`.plan/marshal.json`:

```
"provisioned_version": "0.1.1556"  ->  "0.1.1571"
```

## What the upgrade did

**Stage 1 — regenerate-targets**
- `cache-freshness-check`: `fresh` (cache 0.1.1571 == local
marketplace-clone manifest 0.1.1571). Scope is the local clone, not
upstream.
- `regenerate-executor`: `.plan/execute-script.py` regenerated from the
0.1.1571 cache generator — 155 scripts registered, 110 surfaces derived.
- `cache-retention-sweep`: 55 version dirs across 11 bundles, all kept
(`keep_versions=5`, `keep_days=3`); nothing to prune.

**Stage 2 — reconcile-config**
- `sync-defaults`: 0 keys added, 0 renamed, 0 migrated — config already
current.
- `steps-sort`: `reordered: false` — the 19 `phase-6-finalize` steps
were already in frontmatter order.
- `normalize-keys`: normalized, no unrecognized top-level keys.
- `migrate-bot-lists`: `noop` — already on the two-list model
(`required_bots: coderabbit,pr-agent`, `optional_bots: sourcery`).
- `build.map` drift gate: **declined the re-seed on purpose.** The
derivation wanted to remove `*.css`, `*.ts`, `Dockerfile*` and
`docker-compose*.yml` from the `java` domain. Those four are the
hand-added entries documented in `CLAUDE.md` — no extension's
`classify_globs()` derives them, so a re-seed erases them and any
Dockerfile/compose/CSS/TS-only footprint would then intersect no
registered glob, `build-decision` would return `not_necessary`, and the
change would ship ungated. `build.map` is unchanged by this PR.

**Stage 3 — verify**
- `executor-preflight`: `executor_action: fresh`, `marshal_status:
fresh`, all three versions at 0.1.1571.

**Stage 4 — land**
- This PR.

## Review

Labelled `skip-bot-review`. That label suppresses CodeRabbit (central
`cuioss/coderabbit` config) and PR-Agent (job-level `if:` guard in
`reusable-pr-agent-review.yml`). Sourcery does not honor it centrally —
it would need `github.ignore_labels: [skip-bot-review]` in this repo's
`.sourcery.yaml`.

## Verification

Documentation/config-only footprint: `.plan/marshal.json` is not a build
input and is not a registered `build.map` glob, so the Maven pre-commit
gate does not apply. No production code, `pom.xml`, workflow, Dockerfile
or resource was touched.

Co-authored-by: Oliver Wolff <23139298+cuioss@users.noreply.github.com>
Co-authored-by: Claude <noreply@anthropic.com>

Author: cuioss-oliver

.plan/marshal.json

@@ -348,7 +348,7 @@
       "no_plan_body_days": 7,
       "build_results_days": 5
     },
-    "provisioned_version": "0.1.1556",
+    "provisioned_version": "0.1.1571",
     "config_seed_fingerprint": "58fc3cfc"
   }
 }