fix(trust): refresh 24 stale helper-runtime units (re-#25333)

[PurHur]

Summary

• After fix(trust): restore Pillar 1 after #25299 helper/spine fallout #25334 closed Regression: north-star5-fast / release-readiness red — JitMemoryStreamHelper missing from spine + 2 stale helper-runtime units (re-#25329) #25333, later merges (Stdlib: DateTime accepts Y-m-d H:i without seconds (#25309) #25340 DateTime, DOM: ID map on detach + setIdAttribute first-wins (#25274, #25275) #25341 DOM, Stdlib: preg_match past-end offset binds empty $matches (#25313) #25342 Preg) left 24 committed helper-runtime units fingerprint-stale.
• Real Docker LLVM 9 re-emit of those units + publish into prelinked/helper-runtime/x86_64-linux/ (arch core_fingerprint / llvm_identity_token unchanged — no restamp).
• Restores Pillar 1 helper-runtime-prelink --strict and user_release_ready: yes.

Closes #25347

Test plan

• php script/check-helper-runtime-prelink.php --strict → 315 fresh, 0 stale, 0 broken
• php script/check-selfhost-spine-coverage-sync.php → OK 6640/6640
• ./script/release-readiness.sh --json → user_release_ready: yes (all quick gates ok)
• Clean master before this PR: 291 fresh, 24 stale

Not covered: gen-0 seed rebuild (still provenance-stale warning; out of scope).

Verification excerpt

check-helper-runtime-prelink: x86_64-linux — 315 fresh, 0 stale, 0 broken
user_release_ready: yes
  bootstrap-inventory: ok
  helper-runtime-prelink: ok
  cold-build: ok
  spine-coverage: ok
  root-readme-sync: ok
  north-star5-fast: ok
  vm-driver-probe: ok

Made with Cursor