[codex] Bind Orchestra wiring evidence

[svy04]

What changed

• Added a public-claim gate that requires the Orchestra row to bind src/query/deps.ts, src/query/orchestra.test.ts, and src/services/orchestra as runtime-wired evidence.
• Added a query integration test proving productionDeps() returns the real Orchestra runtime service functions.
• Added an architecture-map drift guard that compares public static-analysis counters against the generated JSON reports.
• Regenerated the directly related script-duplication and public-claim evidence reports.

Claim boundary

This verifies local, no-provider wiring and evidence synchronization. It does not claim production readiness, external validation, live provider execution, benchmark readiness, or hosted deployment.

Validation

• bun test ./scripts/public-repo-readiness.test.ts ./scripts/product-public-claim-boundary.test.ts ./src/query/orchestra.test.ts
• bun run product:script-duplication-audit
• bun run product:public-claim-boundary
• bun run product:public-claim-boundary:check
• bun run verify:privacy
• bun run build
• bun run typecheck --pretty false
• bun run product:quality