feat: add isolated Linux shadow backend

routing/guanghu-os-control-architecture.json

@@ -1,7 +1,7 @@
 {
   "schema": "guanghu.os-control-architecture/v1",
   "record_id": "HLP-GUANGHU-OS-CONTROL-001",
-  "version": "2026-08-15.1",
+  "version": "2026-08-15.2",
   "state": "CURRENT_CANONICAL",
   "final_topology": "GUANGHU_MASTER_WITH_ON_DEMAND_LINUX_SUBCONTROL_AND_RESCUE",
   "control_ownership": {
@@ -46,7 +46,9 @@
     "typed_policy_authorization_and_rollback_binding": 100,
     "target_readback_and_mandatory_reclaim_state_machine": 100,
     "declared_supervisor_core_line_and_function_coverage": 100,
+    "docker_shadow_backend_source_and_isolation_contract": 100,
     "real_isolated_linux_backend": 0,
+    "jd_shadow_backend_physical_cycle": 0,
     "independent_guanghu_first_boot_supervisor": 0,
     "jd_physical_deployment": 0
   },