docs: record physical Play install-order evidence

[daniele21]

Records the successful physical Google Play Internal Testing smoke evidence for the current Harnex/RedactGuard integration, including the actual Play App Signing identities reported for the installed builds.

Confirmed on representative Android hardware with Play-delivered builds:

• RedactGuard installed before Harnex
• Harnex installed later without reinstalling RedactGuard
• consumer observed as PENDING
• explicit Harnex authorization succeeded
• Connect / Disconnect / Reconnect succeeded
• real consumer inference completed

Actual Play App Signing SHA-256 digest reported for both applications:
D6:2D:3C:C8:51:D5:72:05:C3:42:C1:7F:86:26:40:58:E3:FE:29:6A:AE:1B:0E:43:FD:AC:58:82:24:44:1A:BD

Because the two Play-delivered applications currently share the same App Signing identity, this physical run closes install-order / authorization / connectivity / real-inference evidence for the current Play topology, but it does not prove the distinct-Play-signer topology required for a physical independent-signer claim under ADR 0018. Independent-signer behavior remains covered by deterministic cross-app automation.

This PR intentionally does not mark broader Harness 0.5 SR-6, JNI/GGUF, memory, thermal or representative-device release evidence as complete.

[daniele21]

/preflight auto

[daniele21]

Superseded by #554, which reapplies this physical Play evidence on the current dev baseline after #549 and reconciles the release ledger without weakening remaining gates.