Pin shared SDK/UI opening-progress artifacts

[callumalpass]

Shared SDK/UI archive pins only

• Pin both active SDK bindings to the same original bd131b16 archive and all four shared-UI bindings to original b2d7c464 from Connect#895. Update provenance metadata; no Reader application-code changes.
• Preserve native a350db1c bytes/digest. UI keeps the existing warning component/hook and Private entry while adding truthful opening progress and accessible heading focus styling.
• Full Reader workspace lint/format/architecture/typechecks passed: 1138 Vitest +69 Node tests, including Reader441+26, adapter167 and extension176.
• Actual packed-pair qualification:15 tests including both warning exports, strict public types, Vite, all81 UI +896 SDK original members verified. The actual Reader bindings were independently byte-verified locally and on the build VM.
• Canonical LAB preparation build passed:182 pulled files exactly match the remote inventory, correct LAB declaration, all nine progress stages and warning code present, original native/SQLite digests. Preparation only; no deployment.

Targets existing next/new-sdk only. These remain development artifacts, not a release or deployment authorization.