[Quality frontier] Complete evidence-based repository hardening

[edithatogo]

Refined audit snapshot

Default branch: main; kind: software; workflows: 7.

Technique	Present	Warranted
Property-based	no	yes
Mutation	no	yes
DST	no	yes
MT	no	yes
Contract	no	yes

Subissues

• [Quality frontier] Close warranted testing and CI/CD gaps #178
• [Quality frontier] Maximise security and solo-maintainer context #179

Close only when every subissue is complete or records an evidence-backed exclusion. Keep the repository operable by one maintainer.