ci(sync): refresh sure alpha catalog template

[JSONbored]

Summary

• syncs the sure-aio-alpha.xml catalog template with the released Sure alpha source template
• refreshes the generated catalog changelog entry for the sync commit

What changed

• updates the alpha template <Changes> text from Sure Alpha 0.7.2-alpha.1 to 0.7.2-alpha.2
• preserves the alpha-only import, preflight, route-parity, and WebAuthn customization notes from the source template

Why

• sure-alpha/0.7.2-alpha.2-aio.1 is now published, so the Community Apps-facing catalog copy needs to match source truth

Validation

• python -m aio_fleet validate-catalog --catalog-path .
• python -m aio_fleet catalog-audit --catalog-path .
• python -m aio_fleet catalog-changelog --catalog-path . --check
• git diff --check

Notes

• no local catalog automation was reintroduced
• the existing thin validate-catalog workflow is current and unchanged