Release Agent Guild 2.5.40: consolidated machine feedback

[github-actions]

Machine-operated ship branch ship/pilot-machine-feedback-release-2.5.40, byte-for-byte at certified SHA 955ee5dd91cc916cca951ccee8e7fdc234509c69. This replaces closed, unmerged PR #153 solely because GitHub did not credit workflow_dispatch checks from its non-ship/** branch.

Release scope

• publish concrete executable swarm next actions and truthful provider-side effects
• add machine-native discovery surfaces
• classify exact GolemreachTrustBot and AgenstryBot crawler identities
• expose attestation task relation and score inclusion transparently
• release the consolidated change set as Agent Guild 2.5.40

Verification evidence

• generated contract and release artifacts are byte-identical after regeneration
• JSON backend: 1,821 passed, 16 skipped
• SQLite backend: 1,821 passed, 16 skipped
• strict KDF and credential suite: 31 passed
• x402 official-client interop: 4 passed
• trust-plane: 30 passed, 9 skipped
• AGI-1 conformance: 8 passed
• focused version, contract, endpoint, and server-card checks: 29 passed
• independent Python and Node credential, caller-proof, EVM, and wallet-binding verification passed

The repository's existing ship workflow dispatches and waits for the full CI matrix, merges only the certified combined state with main, and runs the deployment-aware release gate against the exact merged SHA.