Adds the explicit private cloud-config seed and minimum-validity controls to cib check, matching cib study and enabling frozen configured studies without internal API workarounds.
Verification: 118 tests, all hosted checks, publication scan, package build, and a real 6/6 configured Codex check with zero harness failures.