fix: read nested execution policy creation result

test: permit hostile client execution in native matrix

test: document shared qualification mount

test: share regression fixtures outside private tmp

test: bound fork matrix workloads

test: avoid fork matrix tripwire race

Make bundled qualification fixtures self-contained

Allow bounded supervisor restart recovery in native gate

Harden restart qualification against transient socket loss

Keep restart qualification workload alive

Add P0 supervisor self-protection

Repair Eggcracker fail-closed lifecycle for 0.1.1

Fix CI lint portability

Initial Lumi Nutcracker 0.1.0 release candidate