Restores the gates the docs promised, prunes nested third-party trees from /update,
strips pack-local load surfaces at install, scans all 45 pinned packs' safety records,
and makes the gate table machine-read so a documented gate must name its enforcer.

v2.3.0 was bumped in #168 but never tagged; this release follows v2.2.0 directly.