chore(abi-drift): expand allowlist 16 → 56 (stale-binary correction) (#115)

## Summary

Follow-up to #110. Stale-binary correction (no behavioural change in CI
— the gate has always used a fresh binary via `cargo install --git ...
--branch main --locked`).

The 16-cartridge allowlist landed in #110 was based on a local survey
run with a stale `iseriser` release binary predating iseriser#15's Zig
reserved-word converter. Re-running the survey with the current `main`
binary shows **56 cartridges clean**, not 16. This PR adds the 40 missed
cartridges.

| Bucket | #110 (stale) | this PR (fresh) |
|---|---|---|
| Clean ✓ | 16 | **56** |
| Drift | 63 | 18 |
| Verifier parse-limit | 5 | 5 |
| Idris2 src bad | 1 | 1 |

## Newly allowlisted (40)

`affinescript-mcp`, `airtable-mcp`, `arango-mcp`, `browser-mcp`,
`buildkite-mcp`, `clickhouse-mcp`, `cloudflare-mcp`, `crates-mcp`,
`discord-mcp`, `docker-hub-mcp`, `duckdb-mcp`, `fly-mcp`,
`github-actions-mcp`, `github-api-mcp`, `google-docs-mcp`,
`google-sheets-mcp`, `grafana-mcp`, `hackage-mcp`, `hex-mcp`,
`jira-mcp`, `linear-mcp`, `matrix-mcp`, `neo4j-mcp`, `neon-mcp`,
`notion-mcp`, `npm-registry-mcp`, `obsidian-mcp`, `opam-mcp`,
`prometheus-mcp`, `pypi-mcp`, `railway-mcp`, `render-mcp`, `rokur-mcp`,
`sentry-mcp`, `slack-mcp`, `supabase-mcp`, `telegram-mcp`,
`todoist-mcp`, `turso-mcp`, `zotero-mcp`.

## Sub-issue updates from the correction

- **iseriser#17** (proposed non-existent Class A emitter fix) — CLOSED,
not-a-bug. Stale-binary artefact.
- **iseriser#18** (Class B name-normalisation) — still valid, scope ~10
cartridges.
- **iseriser#19** (Class P verifier parse-limit) — still valid,
unchanged.
- **standards#150 / #151 / #152 / #153 / #154 / #155** (Class C
missing-enum-in-Zig) — still valid.
- **boj-server#111** (vordr-mcp Idris2 src) — still valid.
- New **Class D — abbreviation drift** surfaced (postgresql-mcp `tx`,
redis-mcp `hgetall`, aws-mcp `cw_*`/`dynamo_*`, gcp-mcp extras) —
separate sub-issue forthcoming.

## Test plan

- [ ] CI green: `ABI Drift Gate` runs `iseriser abi-emit-manifest` +
`iseriser abi-verify` on all 56; each exit-0.
- [ ] Existing checks unaffected (this PR only touches
`.github/workflows/abi-drift.yml`).

Refs hyperpolymath/standards#92 (Phase 2 allowlist expansion).
Refs hyperpolymath/standards#89 (epic — sub-issue 3).

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-authored-by: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

Author: hyperpolymath

.github/workflows/abi-drift.yml

@@ -71,32 +71,74 @@ jobs:
       - name: Resolve cartridge allowlist
         id: discover
         # 80 cartridges in the tree carry a paired Safe*.idr + *_ffi.zig.
-        # 16 cartridges are audited green against the Phase 1b emitter +
-        # Phase 1 verifier (full-tree survey, 2026-05-20). 63 carry real
-        # drift, 5 hit a verifier parser limit (non-canonical Zig switch
-        # arms — separately tracked), 1 has a malformed Idris2 source.
-        # See standards#92 for the survey + drift taxonomy. Expand this
-        # list as drift classes get resolved upstream.
+        # 56 are audited green against the Phase 1b emitter + Phase 1
+        # verifier (re-run 2026-05-20 with current `main` iseriser binary;
+        # earlier 16-cartridge survey was contaminated by a stale local
+        # build pre-iseriser#15). 18 carry real drift (Class B name-norm,
+        # Class C missing-enum-in-Zig, Class D abbreviation drift — see
+        # standards#92 + sub-issues iseriser#18 / standards#150-155 /
+        # standards#TBD-class-D). 5 hit a verifier parser limit
+        # (iseriser#19). 1 has a malformed Idris2 source (boj-server#111).
         run: |
           set -euo pipefail
           {
             echo 'carts<<EOF'
             echo '007-mcp'
+            echo 'affinescript-mcp'
             echo 'agent-mcp'
+            echo 'airtable-mcp'
+            echo 'arango-mcp'
+            echo 'browser-mcp'
+            echo 'buildkite-mcp'
+            echo 'clickhouse-mcp'
+            echo 'cloudflare-mcp'
+            echo 'crates-mcp'
+            echo 'discord-mcp'
             echo 'dns-shield-mcp'
+            echo 'docker-hub-mcp'
+            echo 'duckdb-mcp'
             echo 'feedback-mcp'
             echo 'fleet-mcp'
+            echo 'fly-mcp'
+            echo 'github-actions-mcp'
+            echo 'github-api-mcp'
+            echo 'google-docs-mcp'
+            echo 'google-sheets-mcp'
+            echo 'grafana-mcp'
+            echo 'hackage-mcp'
+            echo 'hex-mcp'
             echo 'iac-mcp'
+            echo 'jira-mcp'
             echo 'k8s-mcp'
             echo 'k9iser-mcp'
+            echo 'linear-mcp'
             echo 'local-coord-mcp'
+            echo 'matrix-mcp'
+            echo 'neo4j-mcp'
+            echo 'neon-mcp'
             echo 'nesy-mcp'
+            echo 'notion-mcp'
+            echo 'npm-registry-mcp'
             echo 'observe-mcp'
+            echo 'obsidian-mcp'
+            echo 'opam-mcp'
             echo 'opsm-mcp'
             echo 'pmpl-mcp'
+            echo 'prometheus-mcp'
             echo 'proof-mcp'
+            echo 'pypi-mcp'
+            echo 'railway-mcp'
+            echo 'render-mcp'
+            echo 'rokur-mcp'
             echo 'secrets-mcp'
+            echo 'sentry-mcp'
+            echo 'slack-mcp'
             echo 'ssg-mcp'
+            echo 'supabase-mcp'
+            echo 'telegram-mcp'
+            echo 'todoist-mcp'
+            echo 'turso-mcp'
+            echo 'zotero-mcp'
             echo 'EOF'
           } >> "$GITHUB_OUTPUT"