ci: detect public release drift

[yhay81]

Summary

• publish hayate-auth 0.10.3 and create-hayate 0.13.1 throughout the docs manifest and quickstarts
• pin the merged community ledger and golden-app evidence commits
• fail CI when a documented PyPI package or create-hayate command falls behind the public release
• run the release freshness check daily without triggering a deployment

Verification

• 14 tests
• Ruff lint and formatting
• live PyPI release freshness check
• strict Zensical build and generated-site link validation
• pip-audit and zizmor