feat: slice 4 - the open management issues live in the repo

Gate 4, slice 4: 26 open management issues imported from live git.lab
(read-only, descriptions included as authorized; GitLab iid = file id,
labels/milestone/priority/due/host/area mapped into frontmatter, the
import aborts instead of inventing a missing milestone or priority).
Two new issues close the F-004 gap where work was really still open
(0033 OVERMIND-01, 0034 CFGMON-11 incl. the plaintext npm-token
rotation); CFGMON-12/13 already route to verified git.lab issues,
MATRIX-05 is done and needs none (agreed with sorb). The three wiki
task blocks now reference their issues, roadmap.md hands all counts to
the generated STATUS.md and states M1-M5 per ADR-0010 (closing F-001
in the canonical prose), pruefe_prosa joins the CI validate job, and
the import protocol under docs/sources/migration/ records every
intervention into imported text.

Verified: validate 0/0 over 29 issue files, gen_status --check current
(distribution line M1 9 - M2 17 - M4 2 plus per-issue milestone and
priority), pruefe_prosa 0 errors with clones and 0 errors/15 unchecked
citations in offline CI mode, drift check green.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

scripts/sha_ausnahmen.tsv

@@ -6,3 +6,7 @@ dfe04c4	Kurzform desselben überschriebenen Commits (dfe04c4→6ffab68)
 5bc25447	Image-Tag aus vendor/windows-CI — außerhalb des Prüfbereichs (overmind)
 2fafe38b	Authentik-uid, kein Git-SHA (AAR 2026-08-11, MAS-subject)
 823a08cac6b03a47d7e2f661200a49ac6e09d38d	neckbeard-v0.1.1-Referenz — externes Repo, nicht im Komponenten-Prüfbereich
+abedb8a2	Alertmanager-Silence-ID, kein Git-SHA (Issue 0002/GAME-01)
+0f64aa3c	Alertmanager-Silence-ID, kein Git-SHA (Issue 0002/GAME-01)
+d5c6ccb2	Kopf des ungespiegelten gameserver-Repos auf Gitea — außerhalb des Prüfbereichs (Issue 0032)
+48441a50	Kopf des gameserver-Repos im Lab — Repo nicht im Komponenten-Klonsatz (Issue 0032)