docs(security): 新增高價值配置 owner packet 收件預檢 [skip ci]

docs/workplans/2026-06-04-iwooos-security-governance-p0.md

@@ -77,6 +77,7 @@
 | P0-10 | 高價值配置 Gate path coverage、工作樹 preflight、owner packet / coverage snapshot 補強 | 100% | 已將 `k8s/nginx/**`、`scripts/ops/**/*cert*`、`scripts/ops/**/*tls*` 納入 `high-value-config-change-gate.py`，讓 Nginx public gateway 與 DNS / TLS / certbot 既有路徑命中 P0 / C0；預設模式可讀取 staged / unstaged / untracked，避免本地 preflight 漏掉未提交配置；owner packet 與 coverage snapshot 已同步最新 pattern；owner evidence 仍未提供，runtime execution 仍 false | Gate sample：`changed_files=6 matched=6 categories=3 c0=2 c1=0`；工作樹 smoke：臨時 `k8s/nginx/*` 檔命中 C0；owner packet：`packets=3 c0=2 runtime_gate=0`；coverage：`categories=14 c0=8 avg=66 runtime_gate=0`；`py_compile`、snapshot JSON parse、progress guard、owner response guard、doc secret sanity、diff check |
 | P0-11 | 高價值配置 Owner Packet 前台同步 | local 100%；production 100% | `/zh-TW/iwooos` 與 `/zh-TW/awooop` 已同步 latest owner packet snapshot，顯示 `packet=3 / c0=2`、Nginx public gateway、DNS / TLS / certbot 與 security tooling 影響範圍；request sent、received、accepted、runtime gate 與 action buttons 仍全部為 `0` | Feature commit `e999c16b`、deploy marker `16c6b983`、Gitea code-review `2973` / CD `2972` success；本地與正式 desktop / mobile / in-app browser smoke：IwoooS 與 AwoooP 均 HTTP `200`、必要文字與 boundary keys 可見、水平溢位 `0`、卡片內操作控制 `0`、危險連結 `0`、工作溝通片語命中 `0`；headline 不提高 |
 | P0-12 | IwoooS posture projection Owner Packet count sync | 100% | `iwooos-posture-projection.snapshot.json` 與 schema 已從舊 `packet=1 / c0=0` 同步為 `packet=3 / c0=2`，避免 committed projection 與前台 / owner packet snapshot 分叉；request / received / accepted / runtime gate 仍為 `0` | `security-mirror-progress-guard.py` expectation 已同步；後續驗證以 JSON parse、schema parse、progress guard、owner response guard、doc secret sanity、diff check 為準；不需要 production browser smoke |
+| P0-13 | 高價值配置 Owner Packet 收件預檢 / reviewer intake | 100% | 已新增 `high-value-config-owner-packet-intake-preflight.py`、snapshot 與文件，把三包 owner packet 轉成送件前 9 項預檢、5 條 reviewer intake lane、27 個 required owner fields 與 16 類 blocked request；request sent、received、accepted、rejected、reviewer queue write、runtime gate、action button 仍全部為 `0` | `HIGH_VALUE_CONFIG_OWNER_PACKET_INTAKE_PREFLIGHT_OK packets=3 c0=2 checks=9 lanes=5 runtime_gate=0`；progress guard 已固定 snapshot schema、summary、false flags、packet ids、check ids 與 lane ids；純 repo 內文件 / snapshot / guard，不需要 production browser smoke |
 
 ## 3. S4.9 Owner Response Gate 規範