fix: advance merged capability truth states

[levineam]

Summary

Advances the foundation capability ledger from the former draft-PR state to the merged repository truth for PR #257.

• records specification: canonical and repository: merged for all four foundation contracts
• replaces stale pull/257 evidence with merge commit 03b5263e3b273ea7a3e76581fd73c6059fd90ada
• keeps implementation partial, verification fixture-proven, activation inactive, and authority none
• updates documentation and regression coverage for the conservative merged lifecycle

Verification

• node --test modules/jarvos-control-plane/test/foundation-contracts-conformance.test.js (30 checks passed)
• node -e "require('./scripts/lib/capability-ledger').assertCapabilityLedger(require('./capability-ledger.json'))"
• full npm test (passed after installing lockfile dependencies and supplying PyYAML in an isolated temporary virtual environment for the existing Hermès adapter test)
• git diff --check

Closes #267