Add branch protection drift guard

[Entr0zy]

Summary

• Adds a focused repository branch-protection drift guard for issue Project Repository & Version Control #10 Project Repository & Version Control.
• Detects missing release status checks, review-count drift, unsigned-commit drift, force-push/deletion settings, admin bypass without exception evidence, and ready export bundles targeting drifted branches.
• Includes deterministic synthetic sample data plus JSON, Markdown, and SVG reviewer artifacts.

/claim #10

Validation

• node repository-branch-protection-drift-guard/test.js
• node repository-branch-protection-drift-guard/demo.js
• git diff --check

Demo artifacts

• repository-branch-protection-drift-guard/reports/branch-protection-packet.json
• repository-branch-protection-drift-guard/reports/branch-protection-report.md
• repository-branch-protection-drift-guard/reports/summary.svg

Deconfliction

This is scoped to protected-branch control drift before release/export. It is separate from broad repository ledger, merge queue governance, component-owner approval, semantic version tag, external reference pinning, notebook output diff, fork provenance, release signature, restore rehearsal, compute sandbox, retention/legal-hold, and embargo-release slices.

Demo artifacts

• repository-branch-protection-drift-guard/reports/demo.webm