feat(provenance): add shared envelope schema #1137

Job	Run time
lint	24s
component-manifest-provenance	21s
repo-metadata	25s
changes	4s
install-from-source (kitchen-sink, --depth workspace --harnesses claude,codex,openclaw,hermes)	18s
windows-native-acceptance	57s
test (3.10)	12m 33s
test (3.12)	15m 54s
install-from-source (repo+claude+publisher, --depth repo --harnesses claude --include publisher)	20s
content-guard	10s
install-from-source (workspace+codex+openclaw, --depth workspace --harnesses codex,openclaw)	17s
install-from-source (repo+claude, --depth repo --harnesses claude)	19s
install-from-source (workspace+hermes, --depth workspace --harnesses hermes)	23s
test (3.11)	10m 16s
install-from-source (workspace+none, --depth workspace --harnesses none)	19s
quickstart-smoke (macos-latest)	24s
quickstart-smoke (ubuntu-latest)	28s
install-from-source (repo+codex, --depth repo --harnesses codex)	21s
quickstart-smoke (windows-latest)	1m 16s
install-from-source (workspace+claude+openclaw, --depth workspace --harnesses claude,openclaw)	18s
evidence-ledger-test	1m 2s
notify-build-and-test (ubuntu-latest)	0s
build-and-test	0s
notify-build-and-test (windows-latest)	0s
Feature configuration (${{ matrix.name }})	0s
Windows (stable, default features)	0s
MSRV (Rust 1.85)	0s
	46m 49s

Provide feedback