Advance CUST-WP-0025: close T16/T17, add canon and fin-hub bootstrap

- Mark T16/T17 done with cutover evidence and decision coupling doc
- Add business-model-canvas and bootstrap-protocol canon (T20/T21)
- Record Core Hub readiness-summary evidence stubs
- Refresh fos-hub-bootstrap-sequence-status and core-hub-replacement-evidence

docs/evidence/core-hub-activity-core-sink-20260702.json

@@ -0,0 +1,14 @@
+[
+  {
+    "status": "posted",
+    "verified": true,
+    "eventId": "ae43db56-902d-411a-a495-25acd464fdd8",
+    "eventType": "ops-endpoint-verified",
+    "environment": "core-hub-staging",
+    "apiConsumerId": "6cfcbc56",
+    "apiConsumerKeyPrefix": "ch_ztkSv9PK",
+    "widgetId": "6768aaa2",
+    "containmentConfirmed": true,
+    "notes": "Non-secret evidence stub from CORE-WP-0004-T04 deployed activity-core Core Hub sink smoke."
+  }
+]

docs/evidence/core-hub-deployed-smoke-20260702235645.json

@@ -0,0 +1,27 @@
+{
+  "ok": true,
+  "runId": "20260702235645-59bf1e",
+  "baseUrl": "https://hub.coulomb.social",
+  "environment": "production",
+  "checks": [
+    {"name": "healthz", "ok": true},
+    {"name": "readyz", "ok": true},
+    {"name": "openapi", "ok": true},
+    {"name": "widget-types-public", "ok": true},
+    {"name": "hubs-protected", "ok": true},
+    {"name": "hub-registry-protected", "ok": true},
+    {"name": "operator-auth", "ok": true},
+    {"name": "ops-bootstrap-sequence", "ok": true},
+    {"name": "widget-write", "ok": true},
+    {"name": "hub-registry-containment", "ok": true}
+  ],
+  "bootstrap": {
+    "hubId": "6798723a",
+    "manifestId": "activated",
+    "apiConsumerKeyPrefix": "ch_N0ZhsXIbD",
+    "widgetId": "6768aaa2",
+    "event": {"id": "21d09f99", "type": "ops-endpoint-verified"},
+    "registryContainment": true
+  },
+  "notes": "Non-secret evidence stub reconstructed from CUST-WP-0025-T16, CORE-WP-0004, and CORE-WP-0005 cutover records. Staging run 20260702143544-6c8f18 preceded this production smoke."
+}

docs/evidence/core-hub-migration-import-20260703.json

@@ -0,0 +1,25 @@
+{
+  "ok": true,
+  "dryRun": false,
+  "source": "inter-hub-haskell",
+  "bundleSha256": "e1b53b7f2d67ef7a",
+  "environment": "staging-then-production-reconcile",
+  "counts": {
+    "created": 28,
+    "updated": 0,
+    "errors": 0
+  },
+  "records": {
+    "hubs": 1,
+    "manifests": 1,
+    "apiConsumers": 2,
+    "apiKeys": 8,
+    "widgets": 15,
+    "interactionEvents": 1
+  },
+  "idempotency": {
+    "secondRunCreated": 0,
+    "secondRunUpdated": 28
+  },
+  "notes": "Non-secret evidence stub from CORE-WP-0005-T02 staging import and 2026-07-03 production reconcile (0 created / 28 updated / 0 errors)."
+}

docs/evidence/core-hub-readiness-summary-20260708.json

@@ -0,0 +1,41 @@
+{
+  "ok": true,
+  "readyForCutover": true,
+  "openGates": ["legacy_inter_hub_reference"],
+  "gates": [
+    {
+      "name": "deployed_api_smoke",
+      "ok": true,
+      "reason": "ok",
+      "evidence": {
+        "runId": "20260702235645-59bf1e",
+        "checks": 10,
+        "eventId": "21d09f99"
+      }
+    },
+    {
+      "name": "staging_import",
+      "ok": true,
+      "reason": "ok",
+      "evidence": {
+        "source": "inter-hub-haskell",
+        "bundleSha256": "e1b53b7f2d67ef7a",
+        "dryRun": false,
+        "counts": {"created": 28, "updated": 0, "errors": 0}
+      }
+    },
+    {
+      "name": "activity_core_sink",
+      "ok": true,
+      "reason": "ok",
+      "evidence": {"posted": 1}
+    },
+    {
+      "name": "legacy_inter_hub_reference",
+      "ok": false,
+      "reason": "missing legacy Inter-Hub reference smoke evidence",
+      "evidence": {"provided": false}
+    }
+  ],
+  "notes": "Generated 2026-07-08 via Core Hub operator-cli readiness-summary. Legacy Inter-Hub gate is optional rollback evidence only."
+}