docs: record tech-debt audit findings (2026-05-26) (#25) #23

Job	Run time
governance / Well-Known (RFC 9116 + RSR)	9s
governance / Workflow security linter	9s
governance / Validate Hypatia baseline	9s
governance / Trusted-base reduction policy	9s
governance / Language / package anti-pattern policy	9s
governance / Guix primary / Nix fallback policy	9s
governance / Security policy checks	9s
governance / Code quality + docs	9s
	1m 12s

Provide feedback