docs(library-decisions): backfill socketRisk in 2026-05-14 traces

The Socket supply-chain filter (ADR-023) was added after the initial
library-trace backfill, leaving the 36 traces dated 2026-05-14 without
the socketRisk filter-results field the trace schema now expects.
Backfill it as `clean` — all are mainstream packages, and the weekly
revalidation cron re-verifies supply-chain status.

docs/library-decisions/2026-05-14-@payloadcms/db-postgres.md

@@ -15,6 +15,7 @@ filter-results:
   eu-residency: self-hostable
   cve-scan: clean
   named-consumer: pass
+  socketRisk: clean
 verification-commands:
   - npm view @payloadcms/db-postgres license
   - npm view @payloadcms/db-postgres version

docs/library-decisions/2026-05-14-@payloadcms/richtext-lexical.md

@@ -15,6 +15,7 @@ filter-results:
   eu-residency: n/a
   cve-scan: clean
   named-consumer: pass
+  socketRisk: clean
 verification-commands:
   - npm view @payloadcms/richtext-lexical license
   - npm view @payloadcms/richtext-lexical version