v2.11.84 - FN/FP reduction
Track R: reputation malice floor (Shai-Hulud account takeover protection)
P1: PyPI unblock (MT-1 ceiling bypass for import-time RCE)
P2b: GHA-005/006 unpinned action + risky workflow compound
P2c: sameModule anti-fragmentation
P3: provenance npm/PyPI + TeamPCP attestation hardening
266 rules. 4196 tests, 0 regression.