fix(ci): accept reusable gate check names

[forkwright]

Summary

Accept the reusable gate job name emitted by repositories such as Theatron and Aletheia when Dependabot evaluates the required real-verification checks.

The matcher remains specific: gate / gate is accepted alongside the legacy gate-attestation leaf, avoiding a broad suffix such as plain gate that could accidentally match an unrelated quality gate.

Verification

• workflow parses as YAML
• deterministic assertion confirms the gate alias is present exactly once
• git diff --check

Observed failure: Theatron dependency PRs #246–#248 had every required protection context green, while this reusable job failed solely because their successful check is named gate / gate.