Registry snapshot (rolling)

Signed, dated snapshot of registries/llm-deprecations.json for pinned scanners. Replaced on every publish; the manifest names the exact source commit. Verify with the public key in src/registry/trustedKeys.ts. See REGISTRY-FRESHNESS.md.