docs(status): record public CI security coverage validation

docs/registry/REGISTRY_READINESS_CHANGELOG_RU.md

@@ -1,5 +1,26 @@
 # Registry readiness changelog
 
+## 2026-06-22 public GitHub Actions validation passed
+
+Changed:
+
+- Recorded first public validation passed after
+  `4f90aba chore(security): harden public secret scan and document policy`.
+- Documented passed public GitHub Actions contours: `CI`, `Coverage` and
+  `Security`.
+- Documented that the hardened public secret scan passed.
+- Reconfirmed that GitHub Actions remains public mirror validation only and is
+  not registry release evidence.
+- Reconfirmed that registry release evidence still requires the Russian
+  build-runner contour.
+
+Runtime impact:
+
+- No runtime/product code changes.
+- No API changes.
+- No UI changes.
+- No business logic changes.
+
 ## 2026-06-22 Gitea duplicate status
 
 Changed:

docs/registry/registry-evidence-manifest.json

@@ -2,7 +2,7 @@
   "schema_version": 1,
   "product": "AWatch-rus",
   "status": "registry-readiness infrastructure evidence manifest",
-  "updated_at": "2026-06-21",
+  "updated_at": "2026-06-22",
   "primary_source_repository": "https://git.iri1968.dpdns.org/awatch-rus/AWatch-rus",
   "primary_git_clone_url_https": "https://git.iri1968.dpdns.org/awatch-rus/AWatch-rus.git",
   "primary_git_platform": "self-hosted Gitea",
@@ -75,8 +75,12 @@
   },
   "public_engineering_transparency": {
     "github_actions_ci": true,
+    "github_actions_ci_status": "passed",
     "coverage_baseline": true,
+    "coverage_workflow_status": "passed",
     "security_scanning": true,
+    "security_workflow_status": "passed",
+    "secret_scan_status": "passed",
     "issue_templates": true,
     "public_roadmap": true,
     "github_role": "public_mirror_validation_only",