test(rename): dé-sprintage tests/adapters (22 fichiers, git mv ; collision vlm arbitrée)

fix(adapters): isole les artefacts PAR pipeline — fin du clobber inter-pipelines

fix(tesseract): timeout sous-processus — un binaire figé gelait tout le run sans log

feat(adapters): Phase B5 — TesseractAdapter expose ALTO XML natif

fix(security): Phase 1 — SSRF eScriptorium + Tesseract lang + bandit nosec

test(sprint-S8.7): bump patch coverage with real tests + fix codecov.yml

refactor(sprint-S8.6): rewrite bricolage tests + remove dead code

test(sprint-S8.6): coverage des branches d'erreur factory OCR + path traversal corpus + RequestIdFilter

feat(sprint-H.2.b): factory canonique ocr_adapter_from_name

refactor: audit S58 — 2 HIGH + 4 MED + 4 LOW bricolages corrigés

refactor: kill bricolage S49-S57 — fixes structurels (audit cleanup)

feat(adapters,app): Sprint A14-S53 fixes correction (audit #8 + #20)

feat(adapters): Sprint A14-S51 — workspace_uri propagé (fix audit #5)

feat(adapters/ocr): Sprint A14-S50 — ConfidenceArtifact + Tesseract (fix audit #4)

feat(adapters/ocr): Sprint A14-S34 — AzureDocIntelAdapter natif (Phase 2 done)

feat(adapters/ocr): Sprint A14-S33 — GoogleVisionAdapter natif (no shim)

feat(adapters/ocr): Sprint A14-S32 — MistralOCRAdapter natif (no shim)

feat(adapters/ocr): Sprint A14-S31 — PeroOCRAdapter natif (no shim)

feat(adapters/ocr): Sprint A14-S30 — TesseractAdapter natif (no shim)