Wire doc entrypoint freshness sweep adapter

[marcusglee11]

Summary

• add a read-only doc entrypoint freshness sweep adapter around check_entrypoint_freshness()
• wire doc_steward.cli entrypoint-freshness-sweep for dry-run/default inert execution and explicit issue creation
• add sweep-lib dedupe payload tests plus dirty dry-run/no-sweep-lib and dry-run receipt rejection coverage

QA

• python3 -m pytest tests_doc/test_entrypoint_freshness_sweep.py tests_doc/test_freshness_validator.py -q → 37 passed
• python3 -m doc_steward.cli entrypoint-freshness-sweep . --dry-run --json → clean payload, 0 findings, no receipt
• python3 -m doc_steward.cli entrypoint-freshness-sweep . --dry-run --record-run → rejected non-zero before receipt write
• python3 scripts/workflow/quality_gate.py check --scope changed --json → passed; mypy advisory unavailable locally

Review

Fresh-context EA advisory: APPROVE. Notes: no cron/scheduler activation; GitHub issue creation remains opt-in behind --create-issue; default/dry-run paths do not create issues.

[marcusglee11]

Fresh-context EA advisory review: APPROVE

Scope reviewed:

• doc_steward/entrypoint_freshness_sweep.py
• doc_steward/cli.py
• tests_doc/test_entrypoint_freshness_sweep.py

Findings:

• Dirty dry-run now uses deterministic local fingerprinting and does not import sweep_lib, touch FindingsDB, write receipts, or create GitHub issues.
• dry_run + record_run is rejected at the shared run() boundary, covering both module and doc_steward.cli entrypoints.
• No cron/scheduler/service activation is introduced.
• Live GitHub issue creation remains explicit behind --create-issue and only after sweep_lib reports a new finding.

QA evidence:

• Local targeted tests: 37 passed.
• Changed-file quality gate: passed blocking checks; mypy advisory unavailable locally.
• Hosted CI: Documentation Validation, Quality Gate, Test Suite 3.11, Test Suite 3.12, Validate Artefact Index all passed.