P5: extract store-memory to GetBusbar/busbar-store-memory (pinned); plugin-ci builds the release image the conformance suite loads

[MattJackson]

P5 extraction, lane p5-extract-nonplane (/status row 57): store-memory. stdio is held back (see "Not in this PR").

Leaves busbar: busbar-store-memory, now GetBusbar/busbar-store-memory (#12, merged to dev).

• The repo's logic crate is predev e1694a8's crates/store-memory byte for byte, with history imported by filter-repo.
• Its -plugin cdylib runs busbar's published conformance suite (store script). plugin-ci is green, signing gate included.
• Pinned at 848851e63a, one git dep (the root's store-memory linked row and the loader's store both-ways fixture) plus fixture-store at the same rev (the kernel's test-support stand-in).
• The [patch] row for busbar-contract was already there. deny.toml allow-git gains the repo.

Ledger rows deleted with the crate:

• qa/construction.toml: census store 1 -> 0. The package name is unchanged, so the pin excuses the drop.
• Design-bindings: PB-38 and PB-99 strike the eight store-memory test citations that moved with the crate. Each row keeps its kernel tests. The ledger is regenerated.
• Scan floors are re-pinned at the measured counts after the crate's two non-test files left: population 941 -> 939, tracing 971 -> 969.
• qa/audit-ledger.json keeps the scopes (coordinator ruling on P5: extract webhook-signature, hook-ranking, auth header/sigv4/oauth; delete plane-example; outbound auth conformance suite #484). kind-isolation rows are unchanged: the census reads the pinned checkout at crates/busbar-store-memory, and the xtask plants on the store now land on that mount.

plugin-ci fix (4e9b306): the conformance step now builds the release cdylib before it runs the suite.

• Since 1882521 (audit loader-conformance deps: bump rustls-pki-types from 1.14.1 to 1.15.0 #13), conformance::cdylib_of takes only the uplifted image or one hashed image.
• cargo test doesn't uplift a dependency's cdylib, and a path crate's cdylib under deps/ has no hash. So a plugin pinned at a busbar that has deps: bump rustls-pki-types from 1.14.1 to 1.15.0 #13, on a runner with no cached image, finds no image.
• busbar-store-memory#12 was the first such repo, and its first run failed exactly that way (run 38209702979). The repo pins 4e9b306, which is green.
• Repos pinned before deps: bump rustls-pki-types from 1.14.1 to 1.15.0 #13 are unaffected until they re-pin.

Not in this PR: busbar-transport-stdio.

• transport stage B: carriers over the host's I/O (tcp, stdio), the connector drives every connection through a carrier #502 (p2-transport-carrier, open and still updating) rewrites 13 files of in-tree crates/busbar-transport-stdio, and draft breaker: no protocol in kernel; the transport states its fault table, PIECE_END=128 rides the same framer lineage (row 66) #561 stacks on it.
• GetBusbar/busbar-transport-stdio dev already holds transport stage B: carriers over the host's I/O (tcp, stdio), the connector drives every connection through a carrier #502's carrier version, pinned to busbar 5172cd4, which isn't on predev.
• Extracting predev's stdio now would leave both PRs with a modify/delete conflict and needs a pin off the repo's dev. Rules 15.1/15.7 say to record the dependency and let the ARCHITECT sequence, so I didn't do it.
• Once transport stage B: carriers over the host's I/O (tcp, stdio), the connector drives every connection through a carrier #502 lands, the extraction is: pin the repo's dev, delete the crate, and remove its ledger rows. The rows are linked-dropped-features x3, the dep-wall carrier row, construction reviewed_extra and census transport 1 -> 0, and the floors. It also needs a busbar-release change: the turnstile's "dropped-in stdio carrier" row runs -p busbar-transport-stdio.

Proof (M3 prover VM, debug, on the shipped tree acd4b0f9):

• Lock and build: cargo metadata --locked, fmt check, cargo build --workspace --all-targets --locked.
• Clippy: -D warnings on xtask and busbar-plugin-loader.
• Tests: xtask (all), busbar-kernel (all) and busbar-plugin-loader are green, including the store conformance and store money acceptance tests.
• Known reds that are not from this branch:
  • loader: 2 secret-env both-ways tests fail at base e1694a8 too (the secret-env cdylib isn't built in this environment).
  • busbar root: ledger_identity can't clone the private oracle engine here. export_plugin_dropped_in_serves::validate_reports... is flaky at base and on this branch alike (1 in 6 each).
• Selftest: cargo xtask selftest passes all 64 gates.
• Gates: cargo xtask gate --all matches base e1694a8 row for row, except that the two store-memory rows (forbid-unsafe-deny, manifest-allowlist) are gone. The red set is the base's own: kind-isolation, kind-isolation-ship, ship-ready.

[github-actions]

promote into predev: all green @f694912be

Already red on predev, not this PR's: 14

gate	row	detail
test:xtask-selftest	::xtask selftest kind-isolation
test:xtask-selftest	::xtask selftest no-deferral-strict-done
test:xtask-selftest	::xtask selftest plane-purity-strict
test:xtask-selftest	::xtask selftest unconstructed
test:xtask-selftest	::xtask selftest structure-lint
test:xtask-selftest	::xtask selftest plane-transport-neutrality
construction	one-pick-site	3 production call site(s) of 'pick_among(' (ceiling 2): crates/busbar-kernel-egress/src/walk.rs:358; crates/busbar-llm/src/engine/exhaustion/fallback.rs:120; crates/busbar-llm/src/engine/pipeline.rs:8
kind-isolation	kind-isolation:deps	3 finding(s), 92 shipped edge instance(s) over 29 class(es), 92 declaration(s); 55 '[[dep]]' row(s), 0 question(s): unlisted-dep-edge legacy -> plane busbar-llm -> busbar-plane-llm is a shipped edge w
kind-isolation-ship	kind-isolation:deps	8 finding(s) over 92 shipped edge(s): ship-edge kernel -> store busbar-kernel -> busbar-store-memory is 'not-allowed': the architecture grants no kernel -> store edge, and the ship criterion is the ar
kind-isolation-ship	kind-isolation:test-deps	5 finding(s) over 31 test edge(s): ship-edge cleanliness -> export busbar-core-admin -> busbar-export-prometheus is 'not-allowed': the architecture grants no cleanliness -> export edge, and the ship c
kind-isolation-ship	kind-isolation:faces	2 finding(s) over 40 crate(s): foreign-entry crates/busbar busbar is kind 'root' and implements 'Transport' 1 time(s) in shipped source — the entry face of kind 'transport'. A trait implementation is
kind-isolation-ship	kind-isolation:legacy-drain	3 finding(s): transitional-live qa/kind-isolation.toml 'busbar-a2a -> busbar-core-admin' (legacy drain: the retiring A2A engine's tests drive the admin surface that drained into the cleanliness tier)
ship-ready	ship-ready:ship-twin	'kind-isolation-ship' is not green: kind-isolation:deps (a dependency the architecture does not grant is still in the graph); kind-isolation:test-deps (a dependency the architecture does not grant is
structure-lint	structure-lint:plane-dup:unledgered	22 finding(s): PLANE-DUPLICATE (module): 'config.rs' — a2a:crates/busbar-a2a/src/a2a/config.rs decisions:crates/busbar-plane-decisions/src/config.rs voice:crates/busbar-voice/src/config.rs (the ledger

tests passed: 24731, failed: 0. Run: https://github.com/GetBusbar/busbar/actions/runs/38347750157 . Artifact verdict-f694912bea72a71d03d89de5076d4ddc846255d2 (failures.json, junit.xml, raw.log; 90 days).