Scope 1: stable ops guardrails (token drill + SLO thresholds)

[svelderrainruiz]

Summary

• add workflow-bot-token-drill.yml and scripts/Test-WorkflowBotTokenHealth.ps1 for scheduled + manual bot-token health checks
• codify ops_control_plane_policy.slo_gate.alert_thresholds in manifest + payload policy
• extend Invoke-OpsSloSelfHealing.ps1 with deterministic alert severity output (�lert_severity) and thresholds metadata
• enrich ops-slo-gate.yml failure/recovery incident body with severity + threshold values
• normalize incident bodies in Invoke-OpsIncidentLifecycle.ps1 and emit deterministic body metadata (�ody_line_count, �ody_sha256)
• update policy validation, workflow contracts, runbook, and CI test list

Validation

• Invoke-Pester -Path ./tests -CI (236 passed, 0 failed)
• Invoke-Pester -Path ./tests/WorkflowBotTokenDrillWorkflowContract.Tests.ps1,./tests/OpsSloGateWorkflowContract.Tests.ps1,./tests/OpsIncidentLifecycleContract.Tests.ps1,./tests/OpsPolicyDriftWorkflowContract.Tests.ps1,./tests/ReleaseClientPolicyContract.Tests.ps1,./tests/ScopeAOpsRunbookContract.Tests.ps1 -CI