feat(api): expose gitea owner response validation

scripts/security/tests/test_gitea_private_inventory_p0_scorecard.py

@@ -56,6 +56,28 @@ def test_scorecard_preserves_current_gitea_inventory_blocker() -> None:
         == "scripts/security/gitea-authenticated-inventory-payload-validator.py"
     )
     assert scorecard["coverage_attestation"]["received_attestation_count"] == 0
+    assert (
+        scorecard["owner_response_validation"]["lane_id"]
+        == "s4_9_gitea_inventory_owner_attestation_response"
+    )
+    assert scorecard["owner_response_validation"]["response_template_count"] == 5
+    assert scorecard["owner_response_validation"]["received_response_count"] == 0
+    assert scorecard["owner_response_validation"]["accepted_response_count"] == 0
+    assert (
+        scorecard["owner_response_validation"]["next_collection_candidate_lane_id"]
+        == "s4_9_gitea_inventory_owner_attestation_response"
+    )
+    assert (
+        scorecard["owner_response_validation"]["latest_local_validation_result"]
+        == "SOURCE_CONTROL_OWNER_RESPONSE_GUARD_OK"
+    )
+    assert (
+        scorecard["owner_response_validation"]["validator_source"]
+        == "scripts/security/source-control-owner-response-guard.py"
+    )
+    assert scorecard["owner_response_validation"]["runtime_execution_authorized"] is False
+    assert scorecard["owner_response_validation"]["gitea_repo_write_authorized"] is False
+    assert scorecard["owner_response_validation"]["refs_sync_authorized"] is False
     assert "gitea_repo_inventory_status_not_ok" in scorecard["active_blockers"]
     assert "gitea_authenticated_inventory_payload_not_accepted" in scorecard["active_blockers"]