docs(repo): fourth whole-repo pass over the repository files (#1103)

[JarryShaw]

Please follow the guide below

• You will be asked some questions, please read them carefully and answer honestly

• Put an x into all the boxes [ ] relevant to your pull request (like that [x])

• Use Preview tab to see how your pull request will actually look like

• Searched for similar pull requests

• Followed the coding style (make pylint, make mypy, make isort)

• make test passes, and a test case covers the change. Narrow runs only, listed below.

• Added a changelog entry under docs/source/changelog/ and regenerated CHANGELOG.md, if the change is user-visible: N/A — centralised in docs(changelog): shared 1.5.0 changelog — long-lived, merges last (#610, #616, #617, #618, #620) #657

What is the purpose of your pull request?

Tick the commit type your subject line carries.

• fix — corrects a defect
• feat — adds a feature
• perf — changes performance, not behaviour
• refactor — changes neither behaviour nor performance
• test — tests only
• docs — documentation only
• ci — workflows or build tooling
• release — bumps the version or rolls up a distribution
• chore — anything else

The fourth whole-repo prose pass of #1103, over the repository-level files. It changes prose only: every changed .py file's AST is unchanged once string expressions are blanked, except where a docstring is added or vendor template text is edited together with its generated const file.

Accuracy:

• legacy_smoke README and Makefile: timestamps render in UTC, not the
  host's zone, since Frame.packet and bytes(frame) return the next frame's bytes #357/PCAP-NG timestamp_epoch is shifted by the host timezone, not UTC #361; the TZ pin is belt-and-braces, measured.
• benchmark README and requirements-pcap_ct.txt: a bare pip install pcap-ct resolves to the newest beta rather than to nothing.
• generators/legacy.py: drop the test_analyse.py defect note (the script
  passes reassembly=True), and describe buffers, the final flush and
  completeness as tcp.py implements them.
• unit-tests.yml: the changelog job's import list was stale; say
  "standard library only" instead.
• conda_vendor.py, cron-conda.yml: the recipe's one run requirement is
  Python; lint.yml: vermin writes a verdict, not a count.
• verdict_covers_checkout.py, run_unittest_leg.py, test_perf.py: name
  the pre-ci: use deploy key for protected maintenance pushes #401 commits as examples, align a timing with the workflow
  table, and use the PyPI name pypcapkit.

Counts and citations:

• Count-free wording for the test: three modules pass alone but fail together, and pytest reports it green #981 module pair, the DPKT-gated test list,
  the NGAP entry points and the docs-only reader comment.
• dispatch.py cites Raw.post_init instead of a stale raw.py line;
  MANIFEST.in drops "today".

Refs #1103

[JarryShaw]

NEEDS CHANGES at e25ee13a4. examples/legacy_smoke/README.md adds timed context ("did leak in before that fix"), so restate the timezone mismatch timelessly. Also check that #357 is the right citation next to #361, since its title is about Frame.packet, and rewrap the over-long lines in util/conda_vendor.py:3-8 and cron-conda.yml.

[JarryShaw]

NEEDS CHANGES at 431800ecd. The citations now check out: #403 made the timestamps UTC and closes #361, and #357 was the wrong issue. One sentence is left. In examples/legacy_smoke/README.md, "the copies of these reports that #387 replaced" still tells the reader what the reports used to show. Restate it as a present-tense fact, for example that a host-zone leak makes the reports disagree (UTC-05:00 against UTC+08:00, with timestamp_epoch shifted 8 hours), or drop it.

[JarryShaw]

GOOD TO GO at d09478564. The flagged sentence is dropped, and the paragraph still reads cleanly. A Sonnet re-review regenerated every report under UTC, Asia/Shanghai and America/New_York and found them byte-identical, which is what the paragraph claims. It also confirmed that frame.py/pcapng.py never consult the host zone, and that the PR adds no timed context or codebase counts.

[github-actions]

Coverage: 90.07% (unit tier, Python 3.15, d09478564, Unit Tests run success)

Package	Statements	Missed	Branches	Partial	Cover
pcapkit (top level)	104	2	20	2	96.77%
pcapkit/const	19595	881	2618	867	92.11%
pcapkit/corekit	2504	70	792	36	96.54%
pcapkit/dumpkit	276	3	100	3	98.40%
pcapkit/foundation	2916	164	1016	34	93.59%
pcapkit/interface	138	7	52	5	93.68%
pcapkit/protocols	17411	224	4580	189	98.10%
pcapkit/toolkit	872	177	298	8	77.18%
pcapkit/utilities	522	2	158	4	99.12%
pcapkit/vendor	4431	2341	1018	156	43.64%

Per-file detail: the coverage-html artifact of this run.