Ship ontology and Siril contract for clean-machine retry

[henry8minus1]

What changed

Regenerated the sanitized public tree from private source revision 880e7536a4c27d279c504582e71f69b14816c04b after the reviewed source fix in henry8minus1/SeeStar-db#349.

• Ships nas_server/processing_ontology.json and its checksum.
• Fails public smoke if the ontology or public_free_core workflow is missing.
• Documents and diagnoses Siril >=1.4.3; Clean Codespace Trial 1 used 1.4.4 after Ubuntu supplied unsupported 1.2.1.
• Carries the other exporter-managed source updates merged since public commit 0ccc0e6.

Validation

• Exported 144 files.
• Privacy scrub: clean.
• Public structural smoke: PASS.
• Golden/end-to-end evidence remains explicitly pending.
• Focused private-source export/doctor/sample tests: 19 passed.
• No __pycache__ or answer/private target folios exported.
• Existing public-only .github/FUNDING.yml preserved.

Next real-environment gate

After merge, resume the stopped Trial 1 Codespace, fast-forward to the resulting immutable public commit, rerun python scripts/public_release_smoke.py, confirm Siril 1.4.4, and continue from the existing successful stack into processing. This continuation is diagnostic Run A, not the fresh-machine proof.