docs: remove Blacksmith org baseline wording

[haasonsaas]

Summary

• rename the org code-security configuration contract/docs from the stale Blacksmith wording to EvalOps security baseline recommended
• update the shared runner-budget guidance to prefer owned EvalOps runners by trust boundary

Verification

• ruby .github/scripts/verify-org-control-plane-contract.rb --contract .github/contracts/org-control-plane.yml --json-output /tmp/org-control-plane-report.json --markdown-output /tmp/org-control-plane-report.md
• ruby -Itest test/verify_org_control_plane_contract_test.rb
• rg -n -i --hidden "blacksmith" . (no matches)

Live note: renamed GitHub code security configuration 245233 to EvalOps security baseline recommended via GitHub API.