fix(cd): keep drain recovery enforcer on controlled profile

ops/runner/test_cd_controlled_runtime_profile.py

@@ -743,6 +743,7 @@ def test_post_start_recovery_verifiers_stay_on_controlled_runtime_profile() -> N
     text = _workflow_text()
     expected_sources = [
         "docs/runbooks/REBOOT-POST-START-QUICK-CHECK.md)",
+        "docs/runbooks/REBOOT-RECOVERY-SOP.md)",
         "docs/runbooks/FULL-STACK-COLD-START-SOP.md)",
         "docs/operations/host-cpu-pressure-drain-readback-2026-07-01.snapshot.json)",
         "docs/operations/post-reboot-runtime-recovery-readback-2026-07-01.snapshot.json)",
@@ -759,6 +760,7 @@ def test_post_start_recovery_verifiers_stay_on_controlled_runtime_profile() -> N
         "scripts/ops/host-runaway-process-exporter.py)",
         "scripts/ops/host-sustained-load-evidence.py)",
         "scripts/reboot-recovery/deploy-to-110.sh)",
+        "scripts/reboot-recovery/enforce-110-runner-failclosed.sh)",
         "scripts/reboot-recovery/recover-110-control-path-and-harbor-local.sh)",
         "scripts/reboot-recovery/apply-credential-escrow-closeout-receipt-to-110.sh)",
         "scripts/reboot-recovery/post-start-quick-check.sh)",
@@ -791,6 +793,7 @@ def test_post_start_recovery_verifiers_stay_on_controlled_runtime_profile() -> N
         "../../ops/reboot-recovery/full-stack-cold-start-baseline.yml",
         "../../ops/runner/check-awoooi-110-controlled-cd-lane-readiness.sh",
         "../../scripts/reboot-recovery/deploy-to-110.sh",
+        "../../scripts/reboot-recovery/enforce-110-runner-failclosed.sh",
         "../../scripts/reboot-recovery/recover-110-control-path-and-harbor-local.sh",
         "../../scripts/reboot-recovery/apply-credential-escrow-closeout-receipt-to-110.sh",
         "../../scripts/reboot-recovery/post-start-quick-check.sh",