Require promotion manifests to bind consumed evidence

[manfromnowhere143]

This addresses issue 361. The default promotion profile currently accepts missing digests and unlisted decision inputs. An unlisted passing policy sidecar can override an embedded failure and change BLOCK to PROMOTE.

The correction requires a digest for each manifest entry and requires the deployment receipt and any consumed policy sidecar to be listed. It preserves valid packets, embedded policy reports and explicitly optional hashes. Unrelated operator notes remain permitted.

The same 28 CPU controls produce 11 failures and 17 passes on dcbcbb5, then 28 passes with this change. All nine existing promotion tests are unchanged. The 19 added controls use the native packet writer and promotion function through normal package imports. There are no errors or skips. The exact published files pass again with Python 3.12.13, PyYAML 6.0.3 and pytest 9.1.1. Ruff passes. One pytest configuration warning remains with optional plugins disabled.

This is a local integrity correction with synthetic receipts. It does not authenticate unsigned evidence, cover concurrent file replacement or establish policy performance. No model, server or robot was run. The full repository suite remains unqualified locally.