fix(grind): require successful qualification effects

[pdfinn]

Summary

• score red-team qualification from signed child type and successful tool results instead of labels and invocation counts
• fail closed before model usage when required source roots, probe SDK files, registered grants, or effective namespace permissions are missing
• require correlated Limbo authoring, write, compile, execution-marker, and safe/vulnerable nsaudit evidence before the live escape dependency can run
• grant /mnt/llm only to the Limbo tool's restricted invocation and document the exact qualification contract
• integrate the dynamic campaign-wait gates from test(agent): require dynamic red-team qualification #562 and the untracked runtime-bytecode policy from Make the tracked runtime tree exactly what the source compiles to #559

Test plan

• Build lucibridge.dis and tools9p.dis
• ./tests/host/grind_escape_test.sh
• delegated child compile/execute emulator regression
• Limbo fixed-purpose service namespace regression
• ./tests/host/namespace_manifest_invariants_test.sh
• ./tests/host/veltro_namespace_failclosed_test.sh
• ./tests/host/write_capability_test.sh
• Python/YAML syntax validation and git diff --check origin/master...HEAD
• rerun the live two-VM campaign and attach the sealed evidence directory

Refs: INFR-434

Generated with Devin