Refresh and harden SRE benchmark evidence

[Jason-Doyle]

Refreshes the published SRE comparison and removes false-positive invalidation from descriptive package metadata.

Changes:

• hashes benchmark-relevant package manifest fields instead of the entire manifest
• continues hashing the lockfile, benchmark sources, runtime sources, migrations, and PostgreSQL configuration
• regenerates the six raw benchmark runs and generated report

Evidence:

• both variants passed 3/3 runs
• delivery and reconciliation counts remain exactly one
• all nine audit questions passed in every run
• application surface, operated tables, and database footprint are unchanged
• runtime remains informational