feat: advance to official ZCode 3.3.5 with execution-bound release evidence

[rldyourmnd]

Remediates audit findings NDH-001 (P0 vendor currentness), NDH-005 (self-declared evidence), NDH-004 (public verification surface) and NDH-011 (bundle provenance) for this module.

ZCode 3.3.5 (released 2026-07-13), all identities independently derived from official artifacts, not copied:

• six artifacts re-pinned by exact filename/bytes/SHA-512, cross-checked against the official electron-updater feeds (hash+size match for all Linux artifacts);
• macOS DMGs: hdiutil checksum VALID, bundle dev.zcode.app 3.3.5 build 3.3.5.3027, arch-exact binaries, deep strict Developer ID signature (Team 8A5X4JJ39T), Gatekeeper "Notarized Developer ID";
• Debian packages: zcode 3.3.5-3027 amd64/arm64, payload /opt/ZCode/resources/glm/zcode.cjs byte-identical to the macOS bundle;
• AppImages: type-2, squashfs payload extracted at derived ELF offsets, embedded CLI byte-identical;
• embedded CLI version constant remains 0.15.2 (rebuilt bundle, new SHA-512, byte-identical across all six artifacts) — no CLI contract re-audit trigger.

Evidence model (schema 2, execution-bound):

• build/release-evidence.json is reset to an honest pending bundle: no lane records, no approval, no fabricated checks;
• the release workflow's embedded verifier now requires schema 2, approved decision, exactly one passed execution record per required lane (fast/release/platform:macos/platform:ubuntu/benchmark:macos/benchmark:ubuntu) with workflow/run identity, toolchain, timestamps and log digests all bound to the module content digest, plus a vendor-currentness observation — pending bundles cannot release.

Verification surface:

• cli-tools/validate_public_contracts.py (new, stdlib-only) validates version lockstep, artifact identity shape, baseline cross-references and marketplace/plugin catalog integrity; declared in .gds/repository.yaml as the required test command;
• GDS projections regenerated from bundle source 7120d79 (was 06dd4355).

Version: 2.1.3 (patch — CLI contract unchanged, payload paths unchanged, schemas compatible). Lockstep updated: VERSION, build/version.json, build/manifest.json, nddev-builder marketplace + core plugin.

All commits SSH-signed per branch ruleset.