docs: record maintenance day hardening outcomes

[VontaJamal]

Summary

• add maintenance-day no-code hardening audit note
• record release dry-run probe evidence (expected failure)
• record local clone remote hygiene sweep results
• keep token rotation and VoiceOver manual check explicitly tracked as pending operator actions

Validation

• remedy now shows repos PASS with FAIL=0
• release dry-run probe run: 22285362028 (expected failure for missing semver changelog section)
• remote hygiene check passes on local armory clone