Bind v4.4 autonomy evidence

[Ohjjam]

What changed

• adds unique SYSTEM-settlement exposure slots with fail-closed lifecycle transitions
• separates admission and settlement shadow evidence and binds commit/reveal reports
• derives validator scores deterministically and distinguishes declared from verified control domains
• reconciles finalized heads across independent providers and reduces governance contamination from canonical events
• adds chained readiness checkpoints
• marks generated bootstrap fixtures mechanics-only and ineligible for reliability or Work Power

Why

The original reliability campaign could count mechanics without proving a real improvement and had no durable worst-case exposure ledger. This stack prevents in-flight work, reorgs, or deleted evidence from being presented as clean autonomous governance.

Validation

• node --test tests/v44-autonomy-safety.test.mjs tests/v44-testnet-reliability.test.mjs tests/v44-public-discovery.test.mjs

[Ohjjam]

Superseded by #24, which contains the complete reviewed and verified v4.4 candidate merged into main.