Refresh lifecycle overhaul execution status

[kim-em]

Refresh the mutable execution checklist to the exact current disabled baseline and remaining approval gates.

• records all eight current protected/main heads
• marks only completed cleanup, entry-page, lifecycle-preparation, open-problems, and editorial work
• leaves audit protection, unverifiable credential facts, staging acceptance, production launch, overlap, and historical completion open
• corrects the CI credential inventory without guessing encrypted-secret identity or expiry

The runbook remains a current-state checklist; this adds no run history or rollout narrative.

Validation: git diff --check; exact submissions deployment 4a1d14e and staging State bb12184 are green with all production capabilities disabled.