EVO-12 deploy-skew guard leg (b): daemon-side skew suppression (nw-venus + audit-pluto)

Re-scope of PLUTO-169 leg (b) only; leg (a) shipped and closed 2026-08-22 with measurement (next.config.ts collectRouteTemplates FS-walks src/app at build, inlines PLUTO_ROUTE_MANIFEST, src/lib/route-manifest.ts compiles templates to anchored regexes; KNOWN_SEGMENTS gone; byte-aligned with Mars). REMAINING: applog daemon consumes detail.isSoftNav/routeResolves plus the deploy-timing window so a stale-build soft-nav of a VALID route downgrades ERROR->WARN and does NOT DM; audit-pluto specs the daemon-side predicate. Canonical predicate unchanged: downgrade ONLY when RSC-soft-nav AND path in the build-time route manifest; hard-nav/curl/bot ALWAYS page. This is a flag-ON prerequisite for the Q3 skew-guard enable, not a live bug - the guard ships dormant (skewSuspected forced false in tierForNotFound). App side owes nothing further.