Preserve ledger venue provenance (#39)

* feat: preserve ledger venue provenance

* fix: satisfy ledger test lint ratchet

* fix: advance image migration inventory

tests/release/test_release_contracts.py

@@ -54,7 +54,7 @@ def test_workflow_actions_are_commit_pinned_and_verify_version_is_project_derive
     assert 'RELEASE_VERSION=v0.1.3' not in verify
 
 
-def test_release_version_and_migration_contract_has_current_head_0031():
+def test_release_version_and_migration_contract_has_current_head_0032():
     project = (REPO / "pyproject.toml").read_text()
     config = (REPO / "app/core/config.py").read_text()
     migrations = sorted(
@@ -64,8 +64,8 @@ def test_release_version_and_migration_contract_has_current_head_0031():
     )
     assert 'version = "0.3.4"' in project
     assert 'app_version: str = "0.3.4"' in config
-    assert len(migrations) == 31
-    assert migrations[-1].startswith("20260913_0031_")
+    assert len(migrations) == 32
+    assert migrations[-1].startswith("20260919_0032_")
 
 def test_dockerignore_is_deny_by_default_required_inputs_only():
     lines=(REPO/".dockerignore").read_text().splitlines(); assert lines[0]=="**"