allow health-data on python 3.14

[ethernet8023]

change

health-data's <3.14 cap prevents installation on the current Hermes runtime. this widens it to >=3.11,<3.15 and tests 3.14 alongside 3.11 in the dependency-light lane.

remove --ignore-requires-python from the wheel-install contract, so stale package metadata fails CI instead of being hidden. the existing release lane stays unchanged.

verification

• the normal wheel-install contract rejects 3.14 before this change and passes after it.
• full local suite: 209 passed on 3.14.7 and 3.11.15. a local relative-path fixture adapter handles this host's scratch directory naming; no tests skipped, scanner unchanged.
• clean Hermes-free CI environments: 32 tests and deterministic smoke pass on each Python version. i reran the 3.14 lane before submission.
• installed entry-point/PluginManager proof registers 11 tools. secret/release scans, compileall, actionlint and diff checks pass.

hosted CI has not run yet. the existing smoke-with-Hermes fixture copies an incomplete plugin and fails on both base and patch; this does not fix that unrelated harness problem. no real health data or external service was used.

Infographic