Hardened public readiness surfaces

Tightened the public readiness path so /states, /v1/states, /trust, and the release proof gate survive upstream latency without flipping launched states to under_validation. Reuses snapshot fallback layers consistently across the four trust-surface invariants.