template: add governance checks and promotion gate

[svelderrainruiz]

Summary

• add the two governance workflows that the downstream onboarding contract expects: Policy Guard (Upstream) / policy-guard and Promotion Contract / promotion-contract
• extend the checked-in develop branch-protection contract to require those checks alongside the existing template-smoke matrix
• document the canonical production environment as the promotion-time acknowledgement surface

Why

A rerun of compare's downstream onboarding against LabVIEW-Community-CI-CD/LabviewGitHubCiTemplate improved to warn after the stable pin fix, but two warnings remained:

• missing production environment
• missing required checks Policy Guard (Upstream) / policy-guard and Promotion Contract / promotion-contract

This PR closes the repo-side half of that gap so live branch protection can be aligned to the checked-in contract.

Validation

• git diff --check
• YAML parse for both new workflows
• verified docs/policy/develop-branch-protection.json now includes the two governance contexts