build(snitchwatch): re-pin snitchwatch to 98aad35 for the r11 candidate

[bearyjd]

Stacked on #89. Re-pins Snitchwatch for the r11 candidate. With #86–#89 underneath, this is the image the r11 VM gate tests.

Summary

• Snitchwatch c088132 → 98aad35 (main CI 4/4). New in this range:
  • docs(snitchwatch): record r12 VM acceptance #94 rule hit counts;
  • docs: note why newer cosign can fail 'verify --key' on published images #98 a 30 s auto-answer with the default action, plus "Decide later";
  • build: install pinned signed Koji toolchain RPMs for the snitchwatch-system build #99 the rule editor;
  • #100 notification Allow once/Deny actions;
  • #104 network-profile enforcement.
• All 13 pinned source files are byte-identical at 98aad35. The bridge version stays 0.1.1, the Cargo package set is identical (one new dependency edge), and the submodule is unchanged. Only the source commit, tree and pins hash move.

Test plan

• Python suites (image-build, image-build-daemon, system); just check
• GUI bundle rebuilt offline at 98aad35 (app commit 285cfdc2…, ELF b63cb4c4…)
• Expected daemon (the 49-file patch from feat(snitchwatch): prompt-slot options in the daemon patch (DropWhileAsking, default-action events) #89) reproduced locally: a4ceceec… ×2
• r11 clean image build ffd6d4bc…; smoke exit=0
• Independent r11 image review: PASS
• r11 VM gate (deny-by-default fixture): PASS, with one finding (#100). Evidence: output/snitchwatch-fresh-vm-r11.OBAPBX/R11-VM-ACCEPTANCE-RESULT.json
  • docs: note why newer cosign can fail 'verify --key' on published images #98: an unanswered prompt is auto-answered once with the default action after 30 s, with no rule. "Decide later" writes a 5-minute app-bound block, which expires; the next connection prompts again.
  • #100: FINDING. The notification's Allow once did not answer the prompt, and with the window closed a new prompt raised the window instead of notifying. Snitchwatch is fixing both.
  • docs(snitchwatch): record r12 VM acceptance #94: hit counts survive a bridge restart and a reboot.
  • build: install pinned signed Koji toolchain RPMs for the snitchwatch-system build #99: editor exact-path rule, pattern warning, over-broad refusal, and rename leaving one file.
  • #104: a profile deny rule file appears, denies and is removed on switch; a manual choice persists across a reboot; user and blocklist rules are untouched.
  • feat(snitchwatch): prompt-slot options in the daemon patch (DropWhileAsking, default-action events) #89: default-action events appear; with DropWhileAsking on (VM-only), a busy-slot connection is dropped and then asked on retry.
  • Registry capture: bootc switch to the ghcr.io ref, then a real rpm-ostree upgrade --check and a full flatpak update on deny-default.
  • The r10 regression checks and the reboot loop.
• CI green

[bearyjd]

Included via #92 (merge commit af32644): this PR's commits are in main as part of the stacked merge; the r12 image was VM-accepted at 21adea3.