0625 minor tuning post-release

[pete-gov]

Rules Content Changes

• CCM-AGM-NAR was removed; agencies no longer have this CCM-specific “No Additional Requirements” rule in the dataset.
• CCM-AGM-NFA was removed; agencies no longer have this CCM-specific FedRAMP notification rule after requesting additional provider materials.
• CPO-CSO-OSA was added to require Class B, Class C, and Class D providers to include the assessor-supplied overall summary of assessment in the Certification Package Overview, while allowing Class A providers to include it optionally.
• FRC.info.subsets.CLA was narrowed from both 20x/Rev5 and Program/Agency applicability to 20x Program applicability only.
• FRC-CLA-MFR fixed a wording typo from “Class Arules” to “Class A rules.”
• FRC-CSO-PKG was clarified to apply to all provider classes by removing the dangling “Class B” qualifier from the certification package requirement.
• IEC-CSO-FIR, IEC-CSO-IIR, and IEC-CSO-OIR renamed the FedRAMP notification contact display name from “FedRAMP Security Team” to fedramp_security@fedramp.gov.
• VER-AGM-DRE was removed; agencies no longer have this vulnerability-response-specific recommendation against requesting extra provider information in the dataset.
• VER-AGM-NFR was removed; agencies no longer have this vulnerability-response-specific FedRAMP notification rule after requesting additional vulnerability materials.

Schema And Structure Changes

• fedramp-consolidated-rules.json top-level metadata was updated from version 2026.06.24.01 / last_updated 2026-06-24 to version 2026.06.25.01 / last_updated 2026-06-25.
• No changes to schemas/fedramp-consolidated-rules.schema.json.
• No breaking schema or machine-readable data-shape changes detected.

Tooling And Test Changes

• No tooling or test files changed in this branch.

[pete-gov]

@dan-fedramp please deconflict and merge whichever of these changes haven't been made elsewhere - since you've separately recreated some of them it may be easier to do it separately and reject this PR. Sorry that I left it open and caused confusion but next time I go on vacation with an open PR it's probably worth checking in on it before separately recreating the changes. ;)