Publish an exact-main Polymarket market recorder image for bounded ACK acquisition

[proerror77]

Parent

#225

Change contract

Publish one dedicated non-executing new-ploy-runner --features full OCI image from exact main so ACK can perform a bounded Polymarket market-data recording without changing the production ECS collector.

Acceptance evidence

• The image contains only the new-ploy-runner runtime and required CA/runtime libraries.
• The image is built with --features full but the dependency graph contains no live-execution feature.
• The ACR workflow exposes an explicit polymarket-market-recorder target and records an immutable digest plus org.opencontainers.image.revision.
• Image smoke verifies the exact source revision, executable presence, and CLI help.
• The default image invocation cannot place orders; the bounded ACK Job must still pass --dry-run.
• Existing research-runner, compiler, trading, and collector image targets are unchanged.

Out of scope

Production ECS deployment or cutover; data collection itself; reference collection; evidence compilation; snapshot/evaluator logic; Paper, Shadow, or Live execution.

Dependency and merge order

None. Merge before the bounded ACK acquisition issue that consumes its immutable image digest.

Focused validation

Build the exact Docker target, inspect its source label, run new-ploy-runner --help, and verify cargo tree -p new-ploy-runner --features full -e features excludes live-execution.

Rollout and rollback impact

Adds an opt-in image target only. Rollback removes the target; it does not mutate any running collector or research artifact.