docs: add Outlook warning-draft sandbox contract

[Jdelg718]

Summary

• Documents Kent's selected first provider/action target: Microsoft Outlook warning draft.
• Uses Microsoft Graph createReply as the draft primitive, but adds no provider calls or credentials.
• Explicitly forbids /send, reply-send mutation, deletes, moves, archives, and credential exports.
• Adds tests ensuring the contract exists and existing workflow exports contain no Outlook send or credential material.

Safety Boundaries

• No OAuth implementation.
• No provider credentials.
• No Microsoft Graph calls.
• No live n8n activation or provider mutation nodes.
• No send-reply mutation; draft creation contract only.

Verification

• python3 scripts/validate_n8n_workflow_exports.py
• python3 -m py_compile outreach_filter.py botfucker/*.py scripts/validate_n8n_workflow_exports.py
• python3 -m unittest discover -s tests -v