[MP5b] Repair and validate Terraphim formulas from release BOM

Goal

Repair all Terraphim formulas from the signed release BOM and own the tap-native validation matrix.

Contract

• Consume generator output from terraphim-ai MP5a; do not hand-edit versions or hashes independently.
• Require non-empty 64-hex SHA-256 values matching exact assets[] entries for server, agent, and grep on every advertised platform.
• Install per-binary Homebrew receipts under each resolved formula prefix:
  • share/terraphim/package-manager.d/terraphim_server
  • share/terraphim/package-manager.d/terraphim-agent
  • share/terraphim/package-manager.d/terraphim-grep
• Formula changes arrive by PR/outbox after the central release; no direct atomic tap push is claimed.

Acceptance

• brew audit --strict passes.
• macOS and Linuxbrew install, version, payload-hash, receipt, zero-updater-network/write, upgrade, and uninstall tests pass for advertised assets.
• Empty, stale, duplicate, wrong-platform, or mismatched hashes fail CI.
• Reprocessing the same manifest yields byte-identical formulas.

Depends on central staging/BOM work: https://git.terraphim.cloud/terraphim/terraphim-ai/issues/3336 and https://git.terraphim.cloud/terraphim/terraphim-ai/issues/3338. Generator/outbox: https://git.terraphim.cloud/terraphim/terraphim-ai/issues/3381.

Start by reading the linked central staging/BOM issues and generator/outbox issue, then run brew audit --strict against the generated formulas. Check the three receipt paths named in the contract and validate the advertised assets against the acceptance matrix. Done means deterministic formulas and passing install, hash, receipt, updater, upgrade, and uninstall checks.