[codex] Add real-pilot replay addendum

[InfoSecHack]

Summary

• Add a Current-Main Replay Addendum to the real-pilot dev-001 human-review summary.
• Record that replayed current-main findings preserve the 18-finding result shape and now include complete per-finding collection_context.
• Clarify that raw replay artifacts remain local-only and that non-claims are unchanged.

Boundaries

• Docs-only update to one case-study file.
• No live AWS, Terraform, raw artifacts, code, tests, score, pass/fail label, owner-confirmed claim, or production-readiness claim.

Validation

• targeted grep for replay addendum, collection_context fields, raw-artifact caveat, and non-claims
• ./scripts/check.sh
• ./scripts/test_fast.sh
• git diff --check
• account/ARN hygiene scans
• Terraform/raw artifact scan