feat(wp-067): GC-IR formal cryptographic bridge, recursive zk-proof attestation & recoverability synthesis 2026-2035

Add WP-067 (GCIR-ZK-RECURSIVE-2035-WP-067) — the formal cryptographic-bridge
and research-apex layer that the prior corpus (WP-062/063/064/065/066) lacked.
Delivers the genuinely-new constructs identified by coverage scan:

- GC-IR (Governed-Compliance Intermediate Representation): compiles TLA+
  safety/liveness invariants (incl. Liveness_KillSwitchTriggers) into
  zk-SNARK/zk-STARK circuits with CI-gated semantic-preservation proofs.
- Recursive / proof-carrying compliance (IVC/folding + recursive SNARK
  composition) with rolling 5-minute proof windows feeding G-SRI (WP-066).
- SystemicRiskAggregator Circom circuit + Groth16 pipeline + trusted-setup
  MPC ceremony + SnarkPack proof aggregation + verification-key management.
- OSCAL proof extensions + Merkle evidence commitments + deterministic audit
  replay + TPM attestation binding; OPA/GAI-SOC/Sentinel/WORM evidence pipelines.
- Federated zk compliance for EU AI Act financial supervision (zero raw-data
  disclosure, strictest-applicable jurisdiction resolution, WCAG 2.1 AA portal).
- Research apex: epistemic universality/singularity, resonance calculi,
  recoverability science, continuity-survivability, constitutional governance.

Artifacts: gen-gcir-zk-recursive-2035.py (data generator, reproducible w/
trailing newline), gen-gcir-zk-recursive-2035-html.py (renderer),
data/gcir-zk-recursive-2035.json, public/gcir-zk-recursive-2035.html.

server.js: page route /gcir-zk-recursive-2035 + 27 API endpoints under
/api/gcir-zk-recursive-2035 (collections w/ :id 404 handling, regulators/:name);
registered WP-067 in governance-index Pillar P9 (now 6 modules), reports[],
dashboards (count 42, strategicSynthesis2030), pillars sub-endpoint primaryApi,
formalAssurance & regulatoryRefs; platformStats endpoints 748->775,
dataObjects 27->28, reports 24->25, dashboards 39->40, artifacts 32->33.

Verified: node --check OK; all 28 collection endpoints 200; :id 200/404;
regulators/:name 200/404; page 200; reproducible byte-identical builds;
zero console errors via Playwright.

Author: OneFineStarstuff