docs(stage2): correct S2-RO-06 integrated status

[Robinlee0929]

Summary

Correct stale lifecycle/status wording in the canonical S2-RO-06 Owner verifier documentation. Exactly one documentation file changes; no production/test code changes.

S2-RO-06 current status

• Existing Owner verifier is already integrated.
• Lab2 revalidation classification: REUSE_WITH_NEW_EXTERNAL_LAB2_DATA_ONLY.
• Production code change required: NO.
• Test change required: NO.
• Documentation correction required: YES.

Lab2 compatibility

• Stage2OwnerVerifier supports Lab2 unchanged and remains target-independent.
• It reuses S2-RO-05 owner_verification_payload(envelope); Lab2 target/credential values are bound through the complete canonical envelope bytes.
• No Lab1-only production verifier path was found.
• Owner trust root, public key, and approval source are not selected by target.

Future Lab2 use still requires separately authorized external data: a fresh Lab2 authorization envelope, a new authorization UUID, a fresh validity window, the exact Lab2 target/credential pair, and an exact matching Owner approval artifact.

No new Owner key, trust root, or approval source is required under the current contract.

Authority boundary

VERIFIED OWNER APPROVAL != VALID CURRENT AUTHORIZATION != EXECUTION AUTHORITY

This PR does NOT establish real Lab2 authority, real Owner approval, live readiness, or execution authority.

Contract preservation

No change to approval schema, Ed25519 rules, canonical JSON, approval source behavior, Win32 source behavior, failure categories, Owner payload contract, execution_authorized=False, or replay/runtime ordering.

Validation

Fresh Safe CI #34704403426 passed on 3c4da6c21f38c42d7a437b0fa7d6ff70130dcf49:

• Python: 3973 passed / 2 skipped / 0 failed (3975 collected).
• Node: 128 passed / 9 files.
• Typecheck: PASS.
• Lint: PASS.
• Build: PASS.
• Report-index: WARN; 1 pass / 13 optional missing / 0 fail / workflow PASS under normal repository policy.
• Tracked mutation: PASS.

Independent review: PASS. FINDINGS: NONE.
Focused review tests: 146 passed / 0 failed; diff, documentation consistency, and readability checks: PASS.

Deferred

• S2-RO-07 known-host revalidation.
• Real Lab2 Owner approval provisioning.
• Real Lab2 authorization creation.
• Lab2 credential provisioning.
• Lab2 live validation.
• Dual-device aggregation.
• Stage 3.

These remain separately authorized work; this PR grants no live or merge authority.