chore(m136,m170): mark delivered dimensions, grade M170's rubric honestly

M136 0.13/0.14 DONE — the child's HOME and the probe check that grades
it. §1–§5 stay open: the live proof has not run, and cannot until a
runner carrying these fixes is deployed.

M170 all nine dimensions DONE.

M170's rubric is graded from command output, including the rows that
did not pass. S1/S3 are blocked on a full Docker VM disk (Docker.raw
at 31G of 32G; postgres exited 1 with "No space left on device"), not
on this diff. R5's lane is blocked the same way, but the check it
exists to make was measured directly on zombie-dev-worker-ant:
resolver=1 scratch=1 home=1 dns=1 egress=1 under landlock and seccomp,
with every executable path answering execvp: No such file or directory.

Neither spec moves to done/. The ship gate wants every P0 green and
two are not.

Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>