Add verified 12MP economic resilience evidence

[GGULBAE]

What changed

• Added a project-generated 4000×3000 JPEG fixture and identical Android/iOS example bundling.
• Added a kit-only 2-warmup plus 10-measured runner with a call-only timing boundary, byte-budget acceptance, source retention, and cleanup of all package-owned outputs.
• Added transactional evidence builders and an offline verifier that replays decode, contain geometry, SHA-256, SSIM, vertical-flip control, checked metadata markers, environment, capabilities, and source-to-output bytes.
• Added an explicit full-range JPEG to limited-range yuv444p visual profile. Both measurements must independently pass the 0.90 quality and 0.02 orientation gates; only six-decimal SSIM implementation drift up to 0.001 is accepted.
• Wired both hosted native demo jobs to emit the scoped bundle with exact source SHA, run ID and attempt, runner image, toolchain, and ffmpeg/ffprobe provenance.
• Added iOS strip-only JPEG sanitization so ImageIO-generated APP1, APP13, and COM segments are removed before maxBytes evaluation and persistence; safe and preserve encoding remain unchanged.
• Added cumulative native-log retention, CI and Docker replay prerequisites, package commands, native/parser/integration tests, and bounded public documentation.

Why

The existing benchmark covered one small-image timing case. This adds a larger reproducible 12 MP source-tree observation for visual-integrity and byte-economics review without claiming universal speed, real-device behavior, peak memory, or cost savings. The iOS sanitizer closes a strict strip-policy gap discovered by the hosted evidence gate instead of weakening that gate.

Local validation

• pnpm verify: 55 files and 517 tests; coverage 94.58% statements, 86.07% branches, 98.33% functions, 95.02% lines
• Xcode native: JPEG sanitizer 29 assertions, JPEG metadata 55 assertions, large/default ImageIO pipeline 136 assertions
• pnpm example:typecheck
• pnpm pack --dry-run
• FFmpeg 5.1, 6.1, 7.1, 8.1, and 9.0 cross-version visual replay checks
• pnpm verify:workflow-supply-chain -- --json
• pnpm docs:check and pnpm site:check
• git diff --check

Hosted checks still required

• Android emulator build, capture, and economic-resilience bundle verification
• iOS simulator build, capture, strip-marker verification, and economic-resilience bundle replay