fix: resolve final PRD alignment issues, update docs

PRD Alignment Fixes:
- disable-package-management.sh: Keep dpkg-query executable for audit
  tools (was disabled despite comments claiming it was preserved)
- run.sh: Replace silent FDE skip with explicit warning message
  (PRD FR-011 says mandatory but host has no LUKS)
- run.sh: Fix checksum generation to use post-rename filename
  (was referencing live-image-amd64.hybrid.iso instead of
  knel-football-secure.iso)

Documentation Updates:
- STATUS.md: Add FR-012 to alignment matrix (was missing)
- STATUS.md: Fix stale requiretty reference (was removed)
- STATUS.md: Update PRD coverage to 12/12
- JOURNAL.md: Replace audit entry with comprehensive fix entry

💘 Generated with Crush

Assisted-by: GLM-5.1 via Crush <crush@charm.land>

run.sh

@@ -1007,7 +1007,8 @@ main() {
                 KNEL_BUILD_MODE="production"
                 log_info "Build mode: PRODUCTION (prompts for credentials during install)"
             fi
-            log_warn "Host FDE check: SKIPPED (not enforced on this host)"
+            log_warn "Host FDE check: ${KNEL_BUILD_MODE} build on potentially unencrypted host"
+            log_warn "PRD FR-011 requires host FDE - proceeding with build anyway"
             echo "Building KNEL-Football secure ISO..."
             echo "ALL operations run inside Docker container"
             echo "Timezone: America/Chicago"
@@ -1246,12 +1247,10 @@ echo "Cache saved (bootstrap + packages)" &&
 ISO_FILE=$(find . -name "*.iso" -type f | head -1) &&
 if [ -n "$ISO_FILE" ]; then
     echo "ISO created: $ISO_FILE"
-    sha256sum "$ISO_FILE" > "${ISO_FILE}.sha256"
-    md5sum "$ISO_FILE" > "${ISO_FILE}.md5"
     FINAL_ISO="knel-football-secure.iso"
     mv "$ISO_FILE" "$FINAL_ISO"
-    mv "${ISO_FILE}.sha256" "${FINAL_ISO}.sha256"
-    mv "${ISO_FILE}.md5" "${FINAL_ISO}.md5"
+    sha256sum "$FINAL_ISO" > "${FINAL_ISO}.sha256"
+    md5sum "$FINAL_ISO" > "${FINAL_ISO}.md5"
     USER_UID=${USER_UID:-1000}
     USER_GID=${USER_GID:-1000}
     chown "$USER_UID:$USER_GID" "$FINAL_ISO" "${FINAL_ISO}.sha256" "${FINAL_ISO}.md5"