docs(observability): require natural evidence

[rldyourmnd]

Summary

• verify OpenObserve ingestion from normal GDS operations
• retain recovery evidence only when a real endpoint outage occurs
• forbid synthetic events, manufactured outages, manual reruns, and blocked work as acceptance traffic
• keep missing natural evidence explicitly NOT_PROVEN

Verification

• go test ./core/telemetry
• git diff --check