style: apply ruff lint --fix + ruff format across the tree

feat(integrity): ADR-0010 on-load verify for GEO series-matrix loads

refactor(integrity): unify ADR-0010/0011 into one src/core/integrity.py

feat(uploads): ADR-0011 manual-upload safety gate ("Now" slice)