Stabilize Artifacts UI validation and security gates

[RNT56]

Summary

• make every Artifacts UI smoke shard launch directly into the Artifacts workspace and wait on exact semantic readiness identifiers
• split long configuration journeys into independent image, video, and speech shards, and disambiguate running-research activity actions
• update the CodeQL action to v4.37.1 and enforce the SQLCipher/Keychain persistence boundary in repository hygiene

Root cause

The post-merge Xcode failure was not an Artifacts runtime defect. The smoke suite combined several long journeys in one UI-test process, navigated through broad accessibility queries, and selected a running-research control whose label aliased its own menu item. Those choices made simulator state and selector resolution nondeterministic.

Validation

• full iOS runtime suite: 118 tests passed, 3 intentional skips, 0 failures
• all 9 isolated UI smoke shards passed using the CI clone topology
• bash scripts/ci/run-xcode-validation.sh finalize
• bash scripts/ci/check-public-hygiene.sh
• swift test --disable-automatic-resolution: 273 tests passed
• swift run --disable-automatic-resolution PinesCoreTestRunner
• npm --prefix site ci
• npm --prefix site run build
• npm --prefix site audit --audit-level=low: 0 vulnerabilities
• git diff --check