docs: sync Sentry decoupled L3 safeguards

[ZhiXiao-Lin]

Summary

• advance the Sentry gitlink and Cloud compatibility lock from v0.7.0 commit cf93cc2 to merged revision 2502afd
• document Rust Pipeline::evaluate_through_l2 and the asynchronous typed TypeScript evaluateThroughL2 result
• document Observer argv_truncated / argv_incomplete handling, including dangerous-prefix blocking and preserved L1 escalation
• clarify complete-evidence overload fail-mode behavior, incomplete-evidence preservation, and the bundled daemon audit-only boundary
• update the root project table and English/Chinese Sentry pipeline, configuration, SDK, operations, and deployment-runbook pages

Sentry source changes:

• feat: enable decoupled L3 judgment with evidence safeguards Sentry#4 merged as 2331ee8
• safeguard follow-up fix: harden decoupled L3 contracts Sentry#5 merged as 2502afd
• post-merge Sentry CI passed both Rust and TypeScript SDK jobs

Cloud compatibility lock digest:

sha256:fa190a6fd4d1488676bb7f05f0c85866a9e90d9f438c3980985c7923ecc4d9e1

Validation

• node --test scripts/verify-cloud-stack.test.mjs
• node scripts/verify-cloud-stack.mjs
• just cloud-stack-check
  • exact ten-component revisions and dependency bindings
  • Cloud workspace/all-target checks
  • 10 Cloud contract tests
  • Gateway wire all-target check against Sentry 2502afd
  • native ACL configuration fixtures
• npm ci and npm run build in apps/docs (473 static pages)
• browser-rendered QA for all five updated English and five updated Chinese Sentry pages, plus representative desktop/mobile layouts; no console errors
• git diff --check