ci: wire the observer runtime proof into the official lane and the demo corpus

The W3-OBSRT connected proof shipped as tests/observer_runtime_live.rs but
nothing ran it: registry-activation-cli.sh had zero references to the binary,
so its seven database tests were dead weight in CI. Added a per-suite block
mirroring the normative-activation and ci-connector blocks exactly -- the
expected set is asserted complete against `--list` discovery, so a future
live_* test that nobody wires here fails the proof instead of silently not
running.

The seven discovered names match the checked-in list byte for byte. The five
remaining #[test] functions in that binary are offline by construction (no
#[tokio::test], no database guard, no pool), so the `^live_` discovery regex
correctly leaves them to the ordinary cargo test gate.

Landing src/observer_runtime/, src/bin/ostk-observer-run.rs and the live suite
added ten tracked text files the published corpus manifest did not list, which
fails the deployment job's completeness gate. Added following the manifest's
existing area|language conventions:
  src/bin/ostk-observer-run.rs           observer_runtime|rust
  src/observer_runtime/*.rs              observer_runtime|rust
  tests/observer_runtime_live.rs         database_verification|rust

Nothing was excluded. All ten were screened against the verifier's
sensitive-pattern gate -- validated first against four known-excluded files
(src/config_tests.rs, the two transcript redaction fixtures, and
src/projectors/lexical_tests.rs), which it still flags -- and all ten are
clean. Read directly as well: the only database URL is read from
FLEET_RECALL_OBSERVER_DATABASE_URL at runtime under VerifyFull, never a
literal, and the live suite reads only the repository's own src/service.rs
bytes into a scratch git repository. No added path matches a .dockerignore
pattern, so the manifest stays consistent with what actually ships.

Claude-Session: https://claude.ai/code/session_01BxEBa1v242Fo1AJJGftFnZ

Author: scottmeyer

deploy/cockroach/tests/registry-activation-cli.sh

@@ -2041,6 +2041,34 @@ while IFS= read -r ci_connector_live_test; do
             "$ci_connector_live_test" -- --exact --nocapture
 done <<<"$ci_connector_live_tests"
 
+# Every Wave-3 exhaustive observer runtime (W3-OBSRT) connected test, by exact
+# discovered name; the set is asserted complete, so a live_* test that nobody
+# wires here fails this proof instead of silently not running.
+observer_runtime_live_tests='live_a_brace_desynchronised_blob_is_indeterminate_never_negative_when_configured
+live_a_crafted_attribute_blob_is_indeterminate_never_negative_when_configured
+live_a_partial_enumeration_is_indeterminate_never_negative_when_configured
+live_a_repeated_run_is_an_exact_replay_when_configured
+live_a_run_never_moves_the_remember_basis_when_configured
+live_a_tampered_blob_never_reaches_the_ledger_when_configured
+live_an_exhaustive_run_verifies_and_names_the_exact_blob_when_configured'
+observer_runtime_live_listing=$(cargo test --locked \
+    --test observer_runtime_live -- --list)
+discovered_observer_runtime_live_tests=$(grep -E '^live_[a-z0-9_]+: test$' \
+    <<<"$observer_runtime_live_listing" \
+    | sed 's/: test$//' \
+    | sort)
+assert_exact "exact observer-runtime connected test set" \
+    "$discovered_observer_runtime_live_tests" \
+    "$observer_runtime_live_tests"
+while IFS= read -r observer_runtime_live_test; do
+    test -n "$observer_runtime_live_test" || continue
+    require_discovered_test "$observer_runtime_live_listing" \
+        "$observer_runtime_live_test"
+    FLEET_RECALL_TEST_DATABASE_URL="$root_url" \
+        cargo test --locked --test observer_runtime_live \
+            "$observer_runtime_live_test" -- --exact --nocapture
+done <<<"$observer_runtime_live_tests"
+
 current_retry_live_test=ledger::cockroach::tests::live_current_projection_whole_unit_retry_when_configured
 current_snapshot_live_test=ledger::cockroach::tests::live_current_projection_snapshot_race_when_configured
 conflict_live_test=ledger::cockroach::tests::live_conflict_polarity_matrix_when_configured

examples/rich-demo/repository-files.txt

@@ -470,6 +470,7 @@ src/application.rs|application_code|rust
 src/bin/ostk-bootstrap-manifest-import.rs|bootstrap_manifest|rust
 src/bin/ostk-conflict-reconcile.rs|conflict_reconciliation|rust
 src/bin/ostk-control-bootstrap.rs|control_bootstrap|rust
+src/bin/ostk-observer-run.rs|observer_runtime|rust
 src/bin/ostk-registry-activate.rs|registry_activation|rust
 src/bin/ostk-registry-generic-successor-activate.rs|successor_activation|rust
 src/bin/ostk-registry-successor-activate.rs|successor_activation|rust
@@ -616,6 +617,14 @@ src/normative_runtime/projection.rs|normative_runtime|rust
 src/normative_runtime/projection_tests.rs|normative_runtime|rust
 src/normative_runtime/repository.rs|normative_runtime|rust
 src/normative_runtime/repository_tests.rs|normative_runtime|rust
+src/observer_runtime/admission.rs|observer_runtime|rust
+src/observer_runtime/drain.rs|observer_runtime|rust
+src/observer_runtime/enumeration.rs|observer_runtime|rust
+src/observer_runtime/error.rs|observer_runtime|rust
+src/observer_runtime/ingress.rs|observer_runtime|rust
+src/observer_runtime/mod.rs|observer_runtime|rust
+src/observer_runtime/receipt.rs|observer_runtime|rust
+src/observer_runtime/source.rs|observer_runtime|rust
 src/private_postgres.rs|database_security|rust
 src/projectors/cockroach.rs|projectors|rust
 src/projectors/dense.rs|projectors|rust
@@ -652,6 +661,7 @@ tests/evidence_ledger_live.rs|database_verification|rust
 tests/generic_successor_activation_live.rs|database_verification|rust
 tests/git_connector_live.rs|database_verification|rust
 tests/normative_activation_live.rs|database_verification|rust
+tests/observer_runtime_live.rs|database_verification|rust
 tests/publication_reader_live.rs|database_verification|rust
 tests/recall_projection_live.rs|database_verification|rust
 tests/registry_activation_live.rs|database_verification|rust