fix(release): reconcile published orro 0.1.0 state and align engine lock with the witnessd>=2.3.2 dependency (#55, #56)

[moonweave]

Summary

Closes #55.
Closes #56.

This PR fixes two release-state defects together:

• ORRO documentation and wrapper metadata still described 0.1.0 as unpublished and reported published_package: false, even though orro 0.1.0 is live on PyPI.
• The pinned engine lock used witnessd 2.3.0 (5db87ac...), which violated ORRO's declared witnessd>=2.3.2 dependency and made pip check fail for the pinned install.

Changes

• Reconciles README, install, packaging, repository-strategy, bootstrap, thin-wrapper, distribution, and fallback documentation with the published orro 0.1.0 state while preserving the non-engine/not-proof/not-assurance boundaries.
• Sets the wrapper published_package claim to true.
• Bumps the engine-lock witnessd pin to released witnessd v2.3.3 (ae260fb9c020a0bf9e00b60d4053a8fcd7adc8a9) while keeping Depone at e1b020b8300c569e35f771c9f84f6998f99a86ce.
• Synchronizes the compatibility matrix, structured matrix, release manifest, fallback policy, fixtures, and maintained engine-lock updater with the new witnessd version/pair.
• Adds scripts/check_orro_release_state.py with --self-test, wired into CI, to keep package versions, published-package claims, witnessd dependency/lock metadata, package-plan state, and release docs internally consistent.
• Makes the PyPI publish action idempotent with skip-existing: true; this PR does not tag or publish anything.

Verification

All local commands used /usr/bin/python3.

• Every .github/workflows/ci.yml checker passed, including all required self-tests and compilation of all scripts and wrapper sources.
• git diff --check passed.
• Pinned-engine e2e smoke passed against ../witnessd at ae260fb9c020a0bf9e00b60d4053a8fcd7adc8a9 and ../depone at e1b020b8300c569e35f771c9f84f6998f99a86ce; the lock matched both commits and the result decision was pass.
• A fresh wheel build produced orro-0.1.0-py3-none-any.whl.
• A fresh venv installed that wheel with witnessd==2.3.3; python -m pip check reported No broken requirements found.
• Installed orro boundary reported version 0.1.0, published_package: true, and preserved contains_engine_logic: false, approves_merge: false, and raises_assurance: false.