docs(audit): convert the changelog to per-version ### detailed entries

The top **Date:** block was a compact one-line-per-version changelog that did
not match the rest of the file's "### date — version: title" + **bold-category**
detailed-entry format. Dissolve it into detailed entries so every version
conforms:

- Add detailed ### entries for the whole CyclesEvidence epoch (v0.1.25.22–.34
  plus the getEvidenceJwks live-serving test and the two WIP/no-version evidence
  entries), above v0.1.25.21.
- Backfill the previously index-only CVE/dependency entries v0.1.25.16–.19,
  between v0.1.25.20 and v0.1.25.15.
- Keep the **Spec:**/**Server:** preamble; remove the compact block.

Docs-only; no version bump, no code/spec/wire change.

Author: amavashev