v7.1.2 — TypeSafe red-team judge

Adds a structured TypeSafe Jev judge for Prisma AIRS red-team scan results.

• Judge local scan exports or fetched job records with airs-cli redteam judge.
• Report attack success rate, uncertainty, coverage and agreement with AIRS labels.
• Configure TypeSafe through the selected CLI tenant; support offline replay.
• Explicitly exclude oversized inputs, disclose inferred objectives and row-based IDs, and validate provider responses and output paths.

Validated with 1,997 passing tests and a read-only ingestion check of a 4,362-row export. No live Jev accuracy or calibration claim is made.