fix(agent): harden self-evolution safety boundaries

[1-ztc]

Summary

• make skill promotion and trusted patch publication rollback file-scoped and fail closed
• isolate reused A/B assignments and wire the live device verifier into the shared runtime
• confine local acceptance reads, bound regex/file inputs, and redact provider diagnostics
• require explicit real-board opt-in and host configuration
• update undici to the patched 7.29.x line

Verification

• npm run verify
• npm audit --omit=dev
• pre-push boundary, hygiene, and lint checks