chore: sync public mirror from internal

[haasonsaas]

Summary

• sync the sanitized public tree from evalops/maestro-internal
• keep evalops/maestro as a generated public mirror of the private source of truth
• preserve public-owned CI and trusted-publishing workflows
• internal source SHA: 7531f893e2801575ad722f47870f4487f2db593c

Validation

• generated by the sync-public-release-mirror workflow in public-tree mode
• workflow prepared-tree smoke and guardrails passed before its PR credential failed
• local prepared-tree smoke passed
• local guardrail rerun reached Vitest but lacked local public-checkout dependencies

Test Plan

• public-source-provenance confirms internal source PR lineage
• CI, integration, conformance, coverage, Socket, and Cursor checks must pass before merge
• do not merge until Cursor Bugbot review completes

Staged Rollout

Staging is unnecessary for this generated mirror PR; it mirrors already-reviewed internal source and does not independently promote runtime behavior.

[chatgpt-codex-connector]

You have reached your Codex usage limits for code reviews. You can see your limits in the Codex usage dashboard.

[haasonsaas]

Superseded by #825 on the canonical generated sync branch required by public-source-provenance. The mirrored commit is identical.