Migrate EdgeProc Core CI/CD orchestration to Dagger

[hseshadr]

Summary

• add an explicit typed-source Dagger graph for quality, full-history provenance and secret scanning, locked dependency audit, actionlint, examples, benchmark, and exact release candidates
• preserve legacy CI while the Dagger shadow ingress proves the graph on GitHub-hosted runners
• add fail-closed tag/main/check identity and archive/checksum contracts without publishing anything

Local evidence

• baseline: 304 tests, 99.28% total / 100% branch coverage
• TDD red: 14 focused failures before implementation
• Dagger module gate: Ruff/format, strict mypy, Xenon A, 5 tests
• full dagger call ci: 296 tests, 99.28%, no skips; real wheel/docs imports; all examples; benchmark; locked pip-audit; snapshot plus 70-commit Gitleaks; actionlint

Release safety

No tag, workflow dispatch, package upload, environment, or registry mutation is part of this PR. The final publisher will remain a source-free official PyPI OIDC bridge after a Dagger-proven exact artifact.