v0.19.1

Changed

• Internal: finalize_scorecard extracted to _scorecard.py — scorecard derived-field computation deduplicated from sync and async observer gateways. No behaviour change.
• is_agent_revoked uses EXISTS — storage query now uses SQL EXISTS instead of fetching a row. No behaviour change.