docs(offer): correct SCORECARD M2/M3 claims and hash-checker first-audit evidence

[tamld]

Why

PR #618 (merged) put factually wrong content into offer/SCORECARD.md that the F0 supervisor accepted from an F1 worker without review:

• M3 items 14–16 described fix(probe): sa-006 reports COMPLETED when the actual Edit fails #611/fix(conv): clean up blind git worktrees and branches after convergence and isolate TestOrchestrateBlindConvergeCLI #614/fix(worker,deliver): clean up session pool worktrees on exit and allow deliver of already-consumed task receipts #617 with the wrong content (e.g. fix(probe): sa-006 reports COMPLETED when the actual Edit fails #611 was described as a receipt override; fix(conv): clean up blind git worktrees and branches after convergence and isolate TestOrchestrateBlindConvergeCLI #614 as a wall-clock receipt bypass).
• fix(probe): sa-006 reports COMPLETED when the actual Edit fails #611 (red-team review of PR fix(probe): check error received from mcpDone channel in AuditHTTPMCPDASTBoundary (#601) #604) and fix(conv): clean up blind git worktrees and branches after convergence and isolate TestOrchestrateBlindConvergeCLI #614 (g8s self-hygiene) are not Mode-3 returns from sibling repos, so they should not count toward M3.
• The hash-checker row listed pre-existing GitHub issues ⚡ Bolt: Optimize matchSnippet to eliminate O(N) []rune memory allocation #63/docs: add Decoupled Memory Architecture whitepaper, IDE integrations, and sync CLI reference #53/[Docs] Add Decoupled Memory Architecture whitepaper, IDE integrations, and sync CLI reference #52/[Memory] Implement Pure-Go Decoupled Knowledge Vault with SQLite FTS5 & BM25 #54 as "first-audit M2 catches", but no first-audit had been run.
• fix(worker,deliver): clean up session pool worktrees on exit and allow deliver of already-consumed task receipts #617 was closed by fix(probe,conv,deliver,offer): resolve Mode-3 issues #611, #614, #617 and complete 5/5 offer scorecard #618 although acceptance criterion 1 (session-pool cleanup) was not implemented (fix(worker,deliver): clean up session pool worktrees on exit and allow deliver of already-consumed task receipts #617 is reopened).

Changes

• hash-checker row: moved to the end of the table. It now records a real read-only first-audit (task 7eaa5c11): the worker reported 5 findings, F0 verified 1 (docs/OPERATIONS.md:191 vs ci.yml:36-97), 1 is partially valid, and 3 were rejected.
• M1: names the 5 original targets plus homelab-proxmox as an extra repo.
• M2: 6/6 (six repos are listed). hash-checker entry corrected.
• M3: 16/2 → 14/2. Only fix(worker,deliver): clean up session pool worktrees on exit and allow deliver of already-consumed task receipts #617 is counted, and marked partial. fix(probe): sa-006 reports COMPLETED when the actual Edit fails #611/fix(conv): clean up blind git worktrees and branches after convergence and isolate TestOrchestrateBlindConvergeCLI #614 are listed as not counted, with the reason.

Verification

tools/ci_link_integrity.sh OK, tools/ci_doc_contract_check.sh PASSED; the pre-push gate ran on push.