Bind all non-cold k8 HPE wrapper events to Lean recipes

[petalas]

Summary

actual LOCAL-PROGRAMS pre/post events
    select the entrance:terminal recipe
    compare its right/left monomials with the retained Lean literals
    require every covered helper touch to lie between its wrappers

Add the opt-in research/hpe-wrapper-event-binding/ package. Both regenerated selected k8 orientations pass for all 30 non-cold HPE helpers, with 24,767 events each. The receipt records all 60 helper/orientation bindings and exact input hashes.

This follows Riquelme Soares's #2706 at 94d77d2cf19b5fbf3d14cd145fc5fd6ad8d24bd6. The original production audit already checks wrapper references and ordering. Hanson Sun's helper-450 package also checks that chronology, with its recipe and scalar endpoint result scoped to helper 450. This adds a separate reusable event-to-literal check for every non-cold HPE helper, not a newly discovered production defect. The README retains the full predecessor credit.

Evidence

• Before: Audit: in-repo HPE checkers do not read the pre-wrapper recipe #2706 demonstrates that the lightweight metadata checks ignore a synthetic pre_wrappers annotation; they do not consume the actual emitted event file.
• After: the new CLI reads actual events. It rejects missing wrappers even when the annotation supplies the correct recipe. Changing only the unused annotation leaves the genuine program valid.
• Registered Python 3.12 replay passes. Ten focused tests include 360 per-helper deletion/terminal cases, recipe and order mutations, optimized CLI rejection, source/cache/size controls and output-overwrite refusal.
• All 70 research-workflow tests and Ruff E4,E7,E9,F,B,I,UP checks pass.
• Committed blobs equal the working files. A fresh git archive export passes the receipt replay and all ten tests without Git or prior caches.

python3.12 -B scripts/research_package.py --package research/hpe-wrapper-event-binding

Started from main bd1b3bc7174cddbfa4e30ac073dc134f48aa6e77, priority revision 5. Refreshed main 25748c3cbcc80cbd7b5245b4be5fcb1213db393f has unchanged guidance and declared inputs; the merge-tree compatibility check passes. Canonical claim and follow-up.

No new Lean theorem, kappa or supplier admission. Cold/FULL-ended helpers, scalar restoration, other native recipes, serialization correspondence and physical/all-size/analytic obligations remain outside this check. No fresh Lean build or complete selected cold replay ran.

Merge Danger

Door: two-way.

Blast Radius: package-local.

Only a new opt-in package and its replay registration are added. No selected record, frozen source, pinned legacy checker or existing workflow is changed.