test(ci): parse mixed workflow dependency forms in the chart fixture

The exact-source parent control stopped on unrelated jobs with array-valued needs before exercising the verdict writer. Accept both YAML forms in the read model while continuing to require the writer exact string dependency. Keep the passing synthetic timing internally consistent. No workflow, runtime, guard or threshold changes.

Contract-Neutral: Verification-fixture correction only; the hosted reporting and permission contracts are unchanged.
Change-source: pulse-maintainer

internal/api/contract_test.go

@@ -102,7 +102,7 @@ proof.process_io = lambda pid: {}
 os.environ['GITHUB_TOKEN'] = 'synthetic-must-not-reach-child'
 report = '    slo_bench_test.go:637: charts/workloads p50=75ms p95=107ms p99=112ms SLO=90ms\n'
 violation = '    slo_bench_test.go:637: SLO VIOLATION: p95=107ms exceeds target 90ms\n'
-passed = report + '--- PASS: TestSLO_WorkloadCharts (0.03s)\nPASS\n'
+passed = report.replace('p95=107ms p99=112ms', 'p95=82ms p99=86ms') + '--- PASS: TestSLO_WorkloadCharts (0.03s)\nPASS\n'
 failed = report + violation + '--- FAIL: TestSLO_WorkloadCharts (0.03s)\nFAIL\n'
 cases = [
     ('idle-pass', False, passed, 0, 0),

scripts/installtests/build_release_assets_test.go

@@ -38,7 +38,7 @@ func TestChartSLOWorkflowPreservesInconclusiveAndFailure(t *testing.T) {
 		Permissions map[string]string
 		Jobs        map[string]struct {
 			Permissions map[string]string
-			Needs       string
+			Needs       any
 			If          string
 			Steps       []step
 		}