v0.11.3 - gate residual: external-target guard

Closes the compound-object residual vectors left by DIVE-1481. The internal-ops carve-out now REFUSES to strip a destructive verb when an external prod/customer target appears anywhere in the ask, so a coordinated or passive compound (e.g. 'delete the board and the production database', 'wipe the board then delete the prod customer records') keeps the verb in the residual, trips the tier-2 floor, and stays hard-human. Floor widened: 'drop <..> table' + 'truncate'. Biased to over-elevate (the safe direction); purely-internal asks still downgrade to lead review. Known inherent limit (keyword heuristic): a prod object named with a noun outside the vocab can still downgrade - lead-reviewer is the backstop. (DIVE-1487)