docs consolidation, big sln build fixes, new advisories and sprints/tasks

docs/modules/export-center/operations/runbook.md

@@ -200,6 +200,6 @@ If encryption enabled, decrypt using age or AES key before verification.
 - `docs/modules/export-center/mirror-bundles.md`
 - `ops/devops/TASKS.md` (`DEVOPS-EXPORT-36-001`, `DEVOPS-EXPORT-37-001`)
 - `docs/aoc/aggregation-only-contract.md`
-- `docs/24_OFFLINE_KIT.md`
+- `docs/OFFLINE_KIT.md`
 
 > **Imposed rule:** Work of this type or tasks of this type on this component must also be applied everywhere else it should be applied.

docs/modules/export-center/overview.md

@@ -40,7 +40,7 @@ See `docs/security/policy-governance.md` and `docs/aoc/aggregation-only-contract
 - **Mirror bundles.** `mirror:full` packages raw evidence, normalized indexes, policy snapshots, and provenance in a portable filesystem layout suitable for disconnected environments. `mirror:delta` tracks changes relative to a prior export manifest.
 - **No unsanctioned egress.** The exporter respects the platform allowlist. External calls (e.g., OCI pushes) require explicit configuration and are disabled by default for offline installs.
 
-Consult `docs/24_OFFLINE_KIT.md` for Offline Kit delivery and `docs/modules/concelier/operations/mirror.md` for mirror ingestion procedures.
+Consult `docs/OFFLINE_KIT.md` for Offline Kit delivery and `docs/modules/concelier/operations/mirror.md` for mirror ingestion procedures.
 
 ## Getting started
 1. **Choose a profile.** Map requirements to the profile table above. Policy-aware exports need a published policy snapshot.