Four committed bundles on main fail their content digest #2135

Workflow.load refuses these committed bundles on current main, with or without #2134:

• packages/flow/public-demo/evidence-packs/mockmed-triage-v1, -v2, -v3 (artifacts/bundle/): the content digest no longer matches, because later qualification fields (entity_labels, execution_profile, policy_contract, actuation_path) have no entry in _SEALED_CANONICAL_OMISSIONS_BY_VERSION.
• packages/flow/benchmark/openemr_api_tier/spike/api_bundle: the mismatch goes the other way; the file writes default values that the list now drops.

Expected: each bundle loads under a reviewed omission rule, or is regenerated, with a test that loads every committed bundle so this can't regress silently. Never relax the digest check itself.

Found while fixing #1431 (see #2134).