chore: reconcile Bootstrap manifest contract

[jmcte]

Summary

• Reconcile the project manifest with the current Bootstrap schema and safety contract.
• Declare the repository's CodeQL language/build targets, canonical class migration, or managed-path dependencies as applicable.

Governing Issue

No governing issue is linked; this is a scheduled Bootstrap fleet reconciliation.

Validation

• The repaired Bootstrap control plane produced a plan for this manifest without schema or ownership-validation errors.
• The change is limited to project.bootstrap.yaml.

Bootstrap Governance

• No real secrets, runtime auth, or machine-local environment files are committed.
• Existing local worktrees were preserved; this PR was created from refreshed origin/main.

Merge Automation

Auto-merge is not available until a maintainer reviews and enables it for this scheduled reconciliation PR; fallback merge-readiness applies.

Notes

• This PR is intentionally manifest-only. Bootstrap-managed generated files should be applied only after this manifest contract is reviewed and merged.

[athena-omt]

Reviewed the current head and approve. The added managed paths match Flow's local governance surfaces, and ci.codeqlLanguages: [python] is consumed by current Bootstrap manifest normalization/rendering for this public generic-empty repository. Verified the Flow contract validator and adjacent tests via bash scripts/ci/run-fast-checks.sh; live CodeQL, CI Gate, and Workflow Lint are successful. No unresolved review threads, prior reviews, or auto-merge request were present.