Back out app auto-seeding; fix report-status + PCTypesStrict bugs (manifest review)

A deep Fable review of the real manifest corpus (READ-ONLY reference) showed the
manifests are an ENFORCEMENT PROGRAM, not an application inventory, and that
auto-seeding the Applications catalog from entry Type + Name was wrong:

- The catalog ALREADY tracks these apps from the classic-shopdb migration, with
  version histories (PC - DMIS, UDC x11 versions, eMX / eDNC, CLM, CSF, Oracle
  Database, FormTracePak). Seeding from manifest labels created DUPLICATES under
  different names (PC-DMIS 2016 vs PC - DMIS; eDNC (bundles NTLARS) vs eMX / eDNC;
  OpenText HostExplorer ShopFloor vs CSF). It also misclassified config drops
  (eMxInfo.txt) as apps and could never match a PC's reported ARP name.
So the seed-applications command + service are removed. Properly linking
manifest entries to the EXISTING catalog is a curated feature, not label-scraping.

Two REAL bugs the review found are fixed and kept:
- Report status (R4): every healthy cycle runs Always/no-detection scripts the
  engine counts as "installed", so keying self-heal off installed>0 marked the
  common scope selfhealed forever and made 'ok' unreachable. Status now derives
  from explicit per-entry self-heal flags only; the stored flag no longer infers
  from action=='installed'; the client kit doc reflects it.
- PCTypesStrict (R5): the runtime engine has no strict handling (preinstall
  runner only). filters.matches_pctype now applies strict only when phase ==
  'preinstall'; simulate + parity thread the scope phase through; the strict test
  uses a preinstall scope.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

plugins/geenforce/plugin.py

@@ -178,27 +178,6 @@ class GeEnforcePlugin(BasePlugin):
                 db.session.commit()
                 click.echo(f"Published {scopename}/{phase} as v{version}.")
 
-        @geenforce_cli.command('seed-applications')
-        @click.option('--shareroot', required=True)
-        @click.option('--preinstall', default=None)
-        def seed_applications_cmd(shareroot, preinstall):
-            """Track the apps the manifests install in the core Applications catalog."""
-            from flask import current_app
-            from .importer import discover_share, load_manifest_file
-            from .service import seed_applications_from_manifests
-
-            with current_app.app_context():
-                sources = list(discover_share(shareroot))
-                if preinstall:
-                    sources.append(('preinstall', 'preinstall',
-                                    load_manifest_file(preinstall)))
-                result = seed_applications_from_manifests(sources)
-                db.session.commit()
-                click.echo(f"Applications: {len(result['created'])} created, "
-                           f"{len(result['existing'])} already tracked.")
-                for name in result['created']:
-                    click.echo(f"  + {name}")
-
         @geenforce_cli.command('export-share')
         @click.argument('scopename')
         @click.option('--shareroot', required=True)