GLAW v1.2.3

GLAW v1.2.3 hardens the autonomous orchestrator and release packaging surface.\n\nHighlights:\n- Exposes normalized compliance action plans to glaw-loop and glaw-headless so orchestrators can route failed final-packet controls without re-parsing raw manifest rows.\n- Requires jurisdiction source catalogs for every jurisdiction source and rejects missing, orphaned, or non-HTTPS source metadata.\n- Centralizes trusted legal authority domains for citation and groundedness gates.\n- Keeps GitHub Actions runtime pins current and preserves source-only / zero third-party package enforcement.\n\nVerification before release:\n- GLAW doctor: failures 0, warnings 0.\n- 180 skill contracts pass.\n- Citation corpus, groundedness, policy, compliance, headless, orchestrator loop, golden-profile, bookkeeping/IRS/adversarial, and package-policy gates pass.\n\nPackage:\n- The release triggers the GHCR source-only OCI artifact workflow for ghcr.io/rikitrader/glaw:1.2.3, ghcr.io/rikitrader/glaw:v1.2.3, and ghcr.io/rikitrader/glaw:latest.