Align zh-CN routing and registry with Contract v1

[Wonderforge-Lab]

Scope

Reconciles the high-consequence zh-CN routing and registry surfaces with the merged Registry Contract v1 source.

• adds language routing, trust-boundary, and direct-deposit-boundary parity to the zh-CN entrypoint;
• aligns registry guidance, quickstart/tag acceptance, generated-view wording, six changed Markdown templates, security guidance, and an upgrade companion;
• adds reviewed provenance terminology and a focused locale-invariant CI check;
• records the independent DS Wave 4 gate in docs/localization/ZH_CN_VALIDATION.md.

Verification

Passed locally:

• registry validator and validator smoke suite;
• tag-promotion guard regression suite;
• generated-view check and smoke suite;
• Markdown-link test;
• locale-invariant test;
• bridge-config schema test.

Independent DS review: PASS — 0 blockers, 0 should-fix, 0 minor findings, and no regressions.