chore: improve collectors and pins

config/pins.yaml

@@ -1,2 +1,2 @@
 version: "1.0.0"
-constitution_sha256: ""
+constitution_sha256: "23bd0cf58ddb19a2664ecaf093de724b71aa2fa330624906199c7acd807700ff"

config/sources.yaml

@@ -1,25 +1,24 @@
-# Define evidence sources and where collectors should look.
-# Keep paths external to code so collectors are layout-agnostic.
-
-vm_skills:
-  path: "../vm-skills"
-  evidence:
-    - "*/outputs/status_matrix.json"
-    - "*/outputs/audit_report.md"
-    - "*/outputs/PROOF.json"
-    - "*/outputs/ROOT.txt"
+version: "1.0.0"
 
 ops:
   path: "../vm-ops"
   evidence:
     - "20-identity/**"
-    - "60-backups/**"
-    - "70-audits/**"
+    - "60-backups/**/*"
+    - "70-audits/**/*"
 
 vm_ledger:
   path: "../vm-ledger"
   evidence:
     - "log/entries.cborseq"
+    - "target/release/ledger-cli"
+    - "target/debug/ledger-cli"
+
+vm_skills:
+  path: "../vm-skills"
+  evidence:
+    - "*/outputs/**/*restore*drill*.json"
+    - "*/outputs/**/*.json"
 
 vm_mcp:
   path: "../vm-mcp"