Implement PMEM-WP-0015 credentialed live pilot with ops-warden routing.

Add credential routing advisories via warden route/access, live pilot evidence
helpers, managed deployment pilot probes, evaluation trend regression gates,
and expanded troubleshooting. Update operator runbook and maturity scorecard.

tests/fixtures/public-api-snapshot.json

@@ -9,10 +9,12 @@
     "CREDENTIALED_DRILL_SCHEMA",
     "CREDENTIALED_OPERATOR_REPORT_SCHEMA",
     "CREDENTIALED_TELEMETRY_DRILL_SCHEMA",
+    "CREDENTIAL_ROUTING_ADVISORY_SCHEMA",
     "CredentialedDrillConfig",
     "Diagnostic",
     "EVALUATION_REPORT_SCHEMA",
     "EVALUATION_TREND_HISTORY_SCHEMA",
+    "EVALUATION_TREND_REGRESSION_GATE_SCHEMA",
     "EVALUATION_TREND_SCHEMA",
     "ExternalAdapterPack",
     "FakeExternalEventLog",
@@ -22,6 +24,7 @@
     "FakeKontextualRuntimeRegistry",
     "FakeMarkitectPackageCompiler",
     "FakeTelemetryAuditSink",
+    "LIVE_PILOT_REPORT_SCHEMA",
     "LifecycleAction",
     "LifecycleActionKind",
     "LifecycleRuleConfig",
@@ -35,6 +38,7 @@
     "LiveShapedTelemetryAuditSink",
     "LocalMarkitectValidator",
     "LocalServiceRunner",
+    "MANAGED_DEPLOYMENT_PILOT_SCHEMA",
     "MANAGED_DEPLOYMENT_SCHEMA",
     "MANAGED_DEPLOYMENT_VALIDATION_SCHEMA",
     "MARKITECT_PACKAGE_REQUEST_SCHEMA",
@@ -49,6 +53,7 @@
     "MemoryPathState",
     "MemoryPhase",
     "OptionalMarkitectValidator",
+    "PHASE_MEMORY_CREDENTIAL_NEEDS",
     "POLICY_OPERATION_POINTS",
     "PhaseMemoryRuntime",
     "PhaseTransitionRule",
@@ -68,6 +73,8 @@
     "ServiceResponse",
     "TROUBLESHOOTING_MATRIX_SCHEMA",
     "TROUBLESHOOTING_REQUIRED_CATEGORIES",
+    "WARDEN_ACCESS_NEED",
+    "WARDEN_ROUTE_FIND_QUERY",
     "WordCountTokenEstimator",
     "abandon_path",
     "activation_quality_report",
@@ -84,14 +91,17 @@
     "evaluation_threshold_report",
     "evaluation_trend_artifact",
     "evaluation_trend_history",
+    "evaluation_trend_regression_gate",
     "fake_external_adapter_pack",
     "fake_external_runtime_config",
     "graph_from_markitect",
     "health_report",
+    "live_pilot_report",
     "live_shaped_adapter_pack",
     "load_evaluation_trend_history",
     "make_review_record",
     "managed_deployment_manifest",
+    "managed_deployment_pilot_report",
     "merge_path",
     "missing_credentialed_adapter_env",
     "operator_troubleshooting_matrix",
@@ -109,6 +119,7 @@
     "plan_retention",
     "plan_retention_from_rules",
     "profile_from_markitect",
+    "resolve_credentialed_environ",
     "resolve_runtime_adapters",
     "retrieve_graph_neighborhood",
     "runtime_from_config",
@@ -119,8 +130,13 @@
     "validate_adapter_pack_manifest",
     "validate_managed_deployment_manifest",
     "validate_operator_troubleshooting_matrix",
+    "warden_access_advisory",
+    "warden_cli_available",
+    "warden_credential_routing_advisory",
+    "warden_route_find",
     "write_credentialed_operator_report",
-    "write_evaluation_trend_history"
+    "write_evaluation_trend_history",
+    "write_live_pilot_evidence"
   ],
   "service_operations": [
     "audit.query",