docs: refresh foundation layer pins and evidence dates - #859

### Scope

Codex cloud review remains in use, but the landing procedure has no per-thread disposition step. This adds that step to the existing **Landing** section: read every connector thread and comment, retain a fixed/replied/not-applicable disposition and evidence, and re-read the exact head and all conversations before declaring readiness.

- Base commit: `64a8cda01700d5e823c18e4b989e856de2ee2241`
- Lane: `lane:foundation`
- Owned paths: `docs/command-center.md`; its evidence hash is refreshed in the last registry-only commit.

### SOTA sources

- [Official OpenAI Codex GitHub review](https://developers.openai.com/codex/integrations/github), fetched 2026-10-08: supported cloud review remains the native route.
- [cli/cli v2.102.0](https://github.com/cli/cli/releases/tag/v2.102.0), installed native client, and [gh api manual](https://cli.github.com/manual/gh_api): GraphQL pagination requires an end cursor and pageInfo for the connection being paged.
- [GitHub GraphQL pagination](https://docs.github.com/en/graphql/guides/using-pagination-in-the-graphql-api) and [native conversation resolution](https://docs.github.com/en/pull-requests/collaborating-with-pull-requests/reviewing-changes-in-pull-requests/commenting-on-a-pull-request#resolving-conversations), fetched/reviewed 2026-10-08. Live native schema and thread returns distinguish outdated, resolved, author and original-commit state.

### Evidence-class table

| Claim | Evidence class | Command / receipt |
| --- | --- | --- |
| Native thread metadata supports the documented read | native_proven within the RPC scope | Read-only paginated `gh api graphql` on PR #854: 4 connector threads, all outer/nested comment pages complete, 0 unresolved; no reply/resolution mutation |
| Every disposition is bound to evidence and the landing head | source_review | Existing Landing subsection plus independent completeness critic; no workflow/bot/ruleset code |
| The document and registered hash are consistent | local_integration | `python3 scripts/validate.py` and `git diff --check`, both exit 0 |

### Local commands run

```text
gh --version
gh version 2.102.0

gh api graphql --paginate --slurp -f query=<retained query>
exit 0: PR #854 returned 4 connector review threads; all pageInfo.hasNextPage fields false

python3 scripts/validate.py
exit 0: repository integrity/scope passed

git diff --check
exit 0
```

The full native query/output is retained privately with its actual post-exec argv. A CLI option-validation failure before the request was retained and corrected; it is not a provider failure. Metadata reads do not prove semantic triage or future enforcement. No low-impact document test was added.

**Modified test files:** none. **Declared modified-test failing set:** empty.

### Decision record

The new `docs/command-center.md#codex-cloud-review-thread-triage` subsection is the source-reviewed B3 procedure. It explicitly covers resolved/outdated threads and nested comments, both connector login spellings, current-head evidence, justified resolution, zero-thread proof and invalidation after a push, thread or comment. A reply, outdated flag or green CI cannot justify resolving a valid outstanding finding.

PR #859 was independently confirmed MERGED first at `64a8cda01700d5e823c18e4b989e856de2ee2241`; its landed map blob matches the retained SHA256. The inverse for B3 is to revert the documentation and its final registry hash coherently.

### Host evidence

No host installation, platform status, client configuration or credential change.

### Checklist

- [x] No workflow, ruleset, frozen input or always-loaded instruction surface changed.
- [x] No credential value or private host state is published.
- [x] No paid service or billing surface introduced.
- [x] Peer-owned worktrees and private landing code preserved.
- [x] Evidence registry is the final commit.
- [x] Landing remains with 5f under the standing cue when required-green and zero threads.