docs(ops): record nginx exporter recovery [skip ci]

docs/security/HIGH-VALUE-CONFIG-CONTROL-COVERAGE.md

@@ -26,6 +26,10 @@
 
 此同步只修正長期覆蓋矩陣與變更 Gate 的一致性，不代表 live evidence 已收到，也不代表可執行 `nginx -t`、reload、certbot renew 或 DNS / TLS 變更。
 
+## 1.1a 2026-06-24 exporter restore helper 覆蓋同步
+
+`high-value-config-change-gate.py` 追加 `scripts/ops/**/*exporter*` 到 `monitoring_alerting_observability`，讓 `scripts/ops/188-nginx-exporter-restore.sh` 這類 exporter restore helper 進入 P1 / C1 owner response 與 monitoring evidence 管控。這次 snapshot 固定數字仍為 `categories=14`、`c0=8`、平均成熟度 `73%`、`runtime_gate=0`；變更只修正 path coverage，不代表 owner response received / accepted、Prometheus reload、Alertmanager reload、host write、Docker action、route smoke、production write 或 runtime gate 已授權。
+
 ## 1.2 2026-06-14 K8s / ArgoCD manifest repo-only 清冊
 
 已新增 `docs/security/K8S-ARGOCD-MANIFEST-INVENTORY.md` 與 `docs/security/k8s-argocd-manifest-inventory.snapshot.json`，將 `k8s/awoooi-prod`、`k8s/argocd`、`k8s/velero`、`k8s/monitoring` 轉成 repo-only manifest inventory。

docs/security/high-value-config-control-coverage.snapshot.json

@@ -373,7 +373,8 @@
         "ops/signoz/**",
         "ops/sentry-self-hosted/**",
         "infra/langfuse/**",
-        "k8s/monitoring/**"
+        "k8s/monitoring/**",
+        "scripts/ops/**/*exporter*"
       ],
       "priority": "P1",
       "required_gate": "monitoring_observability_owner_response_required",
@@ -673,8 +674,8 @@
     "websocket_route_change_authorized": false,
     "workflow_modification_authorized": false
   },
-  "generated_at": "2026-06-18T18:30:00+08:00",
-  "git_commit": "9013fbdc",
+  "generated_at": "2026-06-24T20:14:02+08:00",
+  "git_commit": "2ec7f6f4",
   "lowest_coverage_categories": [
     {
       "category_id": "ai_provider_model_routing",