fix(core): exempt CycloneDX metadata.component.hashes digests from pan-like detection

childContext routed components[].hashes[].content into the digest-whitelisted
context but never metadata.component.hashes[].content, also a legitimate
CycloneDX 1.7 digest site. Any workspace manifest edit re-rolls that digest;
this one (sha256 c528f149...) contains the 13-digit run 0220603085793, which
tripped panLike and failed 16 trust tests. Deterministic repro recorded in the
session; fix routes metadata -> component -> hashes through the existing chain.

Author: thejackshelton

packages/core/src/policy/payment-signals.ts

@@ -190,6 +190,7 @@ function isReceiptCryptographicDigest(value: string, path: string): boolean {
 type EvidenceContext =
 	| 'ordinary'
 	| 'cyclonedx-components'
+	| 'cyclonedx-metadata'
 	| 'cyclonedx-component'
 	| 'cyclonedx-hashes'
 	| 'cyclonedx-hash'
@@ -511,6 +512,8 @@ function childContext(
 	rootIsAdapterFreeze: boolean,
 ): EvidenceContext {
 	if (rootIsCycloneDx17 && key === 'components') return 'cyclonedx-components';
+	if (rootIsCycloneDx17 && key === 'metadata') return 'cyclonedx-metadata';
+	if (context === 'cyclonedx-metadata' && key === 'component') return 'cyclonedx-component';
 	if (context === 'cyclonedx-component' && key === 'hashes') return 'cyclonedx-hashes';
 	if (rootIsRuntimeObservation && key === 'verticals') return 'runtime-verticals';
 	if (context === 'runtime-vertical' && key === 'lanes') return 'runtime-lanes';