chore(ci): consume classify gate requirements

[iamsyc]

Summary\n- Switch CI job conditions from legacy relevance fields to classify-derived requires_* gates.\n- Make ci-gate enforce only required jobs and fail explicitly if classify fails.\n- Expand CI summary to show classification and required gate decisions.\n\n## Local Verification\n- actionlint .github/workflows/ci.yml\n- scripts/ci/static.sh\n- scripts/ci/xcode.sh --action build --configuration Debug\n- build log scan: no warning: or error:\n- local classify simulation: this PR requires static + head-script-self-test only

[github-actions]

CI Summary

Run: Open

Check	Status	Details
Change Scope	code	code=true ui=false script=true product=false test=false ci=true release=false dependency=false tooling=false docs_only=false unknown=false
Required Gates	derived	static=true head_script=true dependency=false unit=false xcode=false ui=false release=false
Dependency Review	skipped	required=false high and critical vulnerabilities block
Static Checks	success	required=true actionlint, shellcheck, shfmt, SwiftFormat, SwiftLint, action pinning
Head Script Self-Test	success	required=true
Unit Tests	skipped	required=false Swift tests: n/a Go packages: n/a Reason: n/a Artifact: n/a
Xcode Build	skipped	required=false Debug build with zero warning scan Artifact: xcode-build
UI Smoke	skipped	required=false Failure classification is written by ui-smoke-summary.json in each artifact. Artifacts: ui-smoke-baseline, ui-smoke-permissionDenied, ui-smoke-rebuildFailed
Release Smoke	skipped	required=false Artifacts: release-smoke-arm64, release-smoke-intel64 Release verify summaries are produced by release.yml before publishing.
Artifacts	link	Open artifacts
CI Gate	success	single branch protection check