release: mirror Trajectory 0.5.37

[mr-lee]

Summary

Mirror the already-published Trajectory 0.5.37 release into datadog-labs/trajectory through the protected public-release environment.

This change:

• advances the stable and beta metadata to v0.5.37;
• adds a minimal source-release mirror path that accepts only the canonical version;
• exposes only public release facts—no private receipt, waiver, pilot, signing, or authorization details;
• verifies the exact canonical asset set, GitHub SHA-256 digests, and checksums.sha256 before publishing;
• publishes draft-first and performs final asset and GitHub latest readback;
• retains only a sanitized target-side publication receipt.

Validation

• git diff --check
• Python bytecode compilation
• 38 unit tests passed
• workflow and policy YAML parsing
• all 14 v0.5.37 source assets independently verified against the frozen receipt: 1,050,382,928 bytes total, with exact names, sizes, and SHA-256 digests

Release operation

After merge, dispatch Attested Public Release Mirror with version 0.5.37, then verify the Labs v0.5.37 release is stable, GitHub latest, and contains the exact 14 source assets.