Publish Python recovery conformance evidence

[amavashev]

Summary

• pin the canonical cross-platform recovery runner from Publish machine-readable recovery conformance evidence cycles-protocol#150
• emit a machine-readable durable recovery report from CI and release verification
• record the PR source SHA (not GitHub's synthetic merge SHA), with a push/release fallback
• upload the report even when conformance fails, with a 90-day retention window
• link a recovery-conformance badge to the public SDK matrix

Validation

• workflow YAML parsed successfully
• final CI passed
• shared recovery profile 0.3: 12/12 scenarios passed
• artifact recovery-conformance-a0225800abc125d5de351c2470685b573ff5bd44 was downloaded and schema-validated
• report pins SDK head a022580, protocol head bc12e1f, canonical catalog digest, and Actions run 30543724786

Depends on runcycles/cycles-protocol#150.