[codex] feat(distribution): add submission-ready bundle surfaces

[xiaojiou176]

Summary

• align Movi root metadata with the public release truth (.nvmrc, packageManager, root version 4.0.5, submission manifest)
• add repo-owned submission-ready-unlisted skills/OpenClaw bundle surfaces without claiming a live listing
• teach the public readiness gate to accept the three explicitly approved Scorecard code-scanning findings while continuing to block any other alert class

Test Plan

• python3 -m pytest -o addopts='' tests/unit/test_public_readiness_gate.py tests/unit/test_open_source_readiness_surfaces.py tests/unit/test_governance_closeout_contracts.py
• python3 tooling/scripts/render_docs.py
• bash tooling/gates/public_readiness_gate.sh repo
• bash tooling/gates/verify_repo_final.sh
• bash tooling/gates/platform_alignment_gate.sh

Breaking Changes

None

Rollout / Risk

• Risk: Medium
• The accepted-exception contract is scoped to three specific GitHub Scorecard rule IDs only.
• The new bundle surfaces stay submission-ready-unlisted and do not claim any live OpenClaw / ClawHub / plugin listing.

Checklist

• Self-reviewed code
• Documentation updated
• Tests updated
• No debug statements left