fix(security): harden trusted patch rollback

[1-ztc]

Summary

• make no-backup rollback delete only coordinator-owned files instead of recursively deleting the learned-skill directory
• preserve publication and restoration failures, validate unique and legacy backup names, and clean partial new publications
• replace regex-only Skill body extraction, reuse registries, validate experiment parameters, and strengthen deterministic A/B allocation
• isolate ISP capture output and require measured convergence and bounded timeout parameters

Verification

• npm run verify (235 moss-agent test files passed)
• focused trusted patch, trusted experiment, and ISP tests
• pre-push boundaries, hygiene, and lint