Merge lane base check: develop 41e1bb7379e3

Merge lane base check: run the full gate on `develop` at `41e1bb7379e3999f886f3b2c60b4463837424194` alone and report it certified or red: nothing had certified it since the last attempt. A red verdict files a fix task; it never holds the lane. Filed by the control plane (`app/merge_lane.py::_certify_idle`). How: run `python3 tools/merge_lane.py run` once. It takes this check's batch, gates that commit with the full gate in its sandbox and reports `certified` or `develop_red` itself. Never run the gate by hand: a hand-run green reports nothing, so no certificate is recorded.

develop 41e1bb7 RED (lane reported develop_red): deb-upgrade test rejects new nfpm.yaml keys {rpm,overrides} (tools/tests/test_deb_upgrade.py:128); vitest muted-text Typography colour guard fails; jaahd acp_selfcheck flaky. Memory: none applied.