fix: tighten pm first-run and current-run truth closure

[xiaojiou176]

Summary

• keep first-run PM session-history failures non-blocking while preserving blocking errors for real sessions
• align the Workflow Cases empty-state CTA and the English Proof & Replay desk copy with the operator loop
• carry CI source metadata through control-plane doctor and preserve authoritative current-run manifests after truth triage
• register the new CI source provenance env keys in env governance

Verification

• pnpm --dir apps/dashboard exec vitest run tests/home_page.test.tsx tests/pm_page_chat.test.tsx tests/pm_page_stage_flow.suite.tsx tests/workflows_queue_page.test.tsx
• PYTHONDONTWRITEBYTECODE=1 python3 -m pytest -q apps/orchestrator/tests/test_ci_current_run_report_contracts.py
• bash -lc "source scripts/lib/ci_step126_helpers.sh && run_ci_step126_current_run_fanin"
• bash scripts/truth_triage.sh