Cover install-test transitive packages in rootful source binding

Exact closure validation also identified eleven uncovered package roots pulled into the install-test binary. Bind their Go/template inputs without changing runtime or relaxing the attestation assertions.

Contract-Neutral: Additive source-manifest coverage only; no runtime or subsystem contract change.
Change-source: pulse-maintainer

scripts/release_control/secure_runtime_rootful_source_manifest_v1.json

@@ -66,8 +66,10 @@
     "internal/collectorlifecycle",
     "internal/config",
     "internal/crypto",
+    "internal/discovery",
     "internal/dockeragent",
     "internal/filesystemprobe",
+    "internal/fleethealth",
     "internal/hostagent",
     "internal/hostmetrics",
     "internal/kubernetesagent",
@@ -77,6 +79,7 @@
     "internal/mockmodel",
     "internal/mockruntime",
     "internal/models",
+    "internal/monitoring",
     "internal/notifications",
     "internal/operationaltrust",
     "internal/operationreceipt",
@@ -89,21 +92,29 @@
     "internal/sensors",
     "internal/ssh/knownhosts",
     "internal/storagehealth",
+    "internal/system",
     "internal/truenas",
     "internal/unifiedresources",
     "internal/unraid",
+    "internal/updates",
     "internal/updatesignature",
     "internal/utils",
     "internal/vmware",
-    "pkg/auth",
+    "internal/websocket",
     "pkg/agents/docker",
     "pkg/agents/filesystem",
     "pkg/agents/host",
     "pkg/agents/kubernetes",
     "pkg/aicontracts",
+    "pkg/audit",
+    "pkg/auth",
+    "pkg/db",
+    "pkg/discovery",
     "pkg/diskinventory",
+    "pkg/edition",
     "pkg/fsfilters",
     "pkg/licensing",
+    "pkg/metrics",
     "pkg/pbs",
     "pkg/pmg",
     "pkg/proxmox",