Trust: restamp gen-0 lowering fingerprint after openssl/bz2 drift (#22427)

[PurHur]

Summary

• Restamps prelinked/bootstrap-gen0/manifest.json lowering_source_fingerprint (+ .bootstrap_lowering_source.sha) to the live lib/+ext/+patches hash after recent openssl / bz2 / php-in-php merges.
• Same provenance restamp pattern as Foundation: north-star5-fast 4f-m red — gen-0 lowering_source_fingerprint drift after Reflection/intl/php-in-php merges (re-#22159) #22192 / Trust: restamp gen-0 fingerprint after Reflection/SimpleXML drift (#22159) #22160 — committed gen-0 driver blobs unchanged.

Closes #22427

Test plan

• php script/check-bootstrap-gen0-manifest-sync.php → OK (f95eba7a061f…)
• ./script/docker-exec.sh -- bash -lc 'make north-star5-verify-fast' → OK (step 4f-m ok)
• ./script/release-readiness.sh --json → "user_release_ready": "yes", north-star5-fast ok

Verification transcript

check-bootstrap-gen0-manifest-sync: OK (gen-0 argv driver 994944 bytes, manifest match, lowering_source_fingerprint=f95eba7a061f…)
north-star5-verify: step 4f-m ok (gen-0 manifest matches committed driver)
north-star5-verify: OK (fast — use --strict before merging bootstrap/M5 work)
user_release_ready: yes

Made with Cursor