docs: record the Ontos v5.0.2 release

[ohjonathan]

Summary

• record the shipped v5.0.2 tag, exact commit, GitHub release, PyPI publication, and successful tagged workflow in the O4 ledger
• record the live B1 self-validation result: download-testpypi-wheel succeeded on attempt 1 of 12 before exact-wheel install and outside-checkout smoke testing
• mark [P1] v5.0.1 count reconciliation + config/provenance tail #148 shipped/closed and reconcile the program to 11/12 closed issues, with only [P1-containing] v5.0.1 patch-safe sweep + v6.0.0 path compatibility removal #149's v6.0.0 breaking removal remaining
• add the structured Ontos release session log and regenerate Ontos-managed artifacts

Validation

• tag v5.0.2 resolves to 61fd4bc8d9f7549bdfb2ac0c34490333d12bfc92
• publish workflow 29346309272 passed end-to-end
• PyPI JSON and a clean external virtual-environment install report 5.0.2
• [P1] v5.0.1 count reconciliation + config/provenance tail #148 is closed; 🗺️ Audit remediation tracker (from PR #145) #158 is updated and remains open for [P1-containing] v5.0.1 patch-safe sweep + v6.0.0 path compatibility removal #149
• Ontos doctor: 10 passed, 0 failed
• focused release/version tests: 16 passed
• llm-dev manifest conformance: 4/4 passed
• git diff --check: passed

Governance remains provider-limited; strict P3 is not certified and D.6 remains withheld.