fix(ci): green the required checks on this PR

- scripts/tests/dispatch-paths.sh: assert the dispatch quarantine on the
  production runner (exit 78, BLOCKED, no outcome state) and run the
  path/outcome contracts against a test-only seam copy with exactly the
  interlock removed. Planted control: the seam copy must not be refused;
  the test fails outright once the interlock is gone. Closes #587.
- bots/gsbot/Cargo.lock: rustls 0.23.40 -> 0.23.45 (RUSTSEC-2026-0285),
  rustls-webpki 0.103.13 -> 0.103.15; cargo-deny advisories clean.
- .hypatia-baseline.json: baseline four code_safety findings in vendored
  bots/echidnabot (fix upstream; tracking #588, expires 2027-01-05).

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

Author: hyperpolymath