feat: establish native desktop update trust root

product-source/hololake-native-desktop/foundation.json

@@ -1,13 +1,19 @@
 {
   "schema": "hololake.native-desktop-foundation/v1",
   "record_id": "HLP-NATIVE-DESKTOP-FOUNDATION-001",
-  "state": "FOUNDATION_ROOT_CREATED_TAURI_SCAFFOLD_PENDING",
+  "state": "MINIMAL_TAURI_SCAFFOLD_AND_FAIL_CLOSED_UPDATE_TRUST_ROOT_IMPLEMENTED",
   "canonical_shell": "TAURI_V2_RUST_REACT",
   "product_ui_implementation_started": false,
   "selected_visual_direction_present": false,
   "upstream_product_update_endpoints": [],
   "production_update_endpoint_owner": "HOLOLAKE_ONLY",
   "release_broadcast_contract": "contracts/release-broadcast.schema.json",
+  "release_trust_source": "src-tauri/release-trust.json",
+  "release_trust_state": "UNPROVISIONED_FAIL_CLOSED",
+  "tauri_update_artifacts_enabled": true,
+  "automatic_update_check_on_startup": false,
+  "human_opt_in_download_install_required": true,
+  "automatic_restart_allowed": false,
   "private_signing_material_allowed_in_source": false,
   "donors": [
     {