fix(ci): foundational CI/CD audit — bytesLength + STEP 4-B stdlib decls + governance allowlist + Pages precheck + Scorecard caller perms

fix(ci): foundational CI/CD audit — bytesLength + STEP 4-B stdlib decls + governance allowlist + Pages precheck + Scorecard caller perms #314