M04: Coverage/security/reproducibility guardrails (#4)
* docs(M03): closeout - ledger merge SHA 975dda4b, Quality 22834861040; seed M04
Made-with: Cursor
* M04: Coverage/security/reproducibility guardrails
- Smoke: remove pip-audit (keep fast)
- Quality: add pip-audit (fail on vuln), verify pinned deps, ci_environment.txt
- Quality: coverage gate 33% -> 40%, --cov-report=term
- Quality: upload coverage.xml, ci_environment.txt artifacts
- Add scripts/ci/verify_pinned_deps.sh
Made-with: Cursor
* ci: trigger Smoke Tests for M04 PR
Made-with: Cursor
* docs(M04): run1 analysis, toolcalls
Made-with: Cursor