feat: capture reviewable Pi trajectories

[nmogil]

Summary

• normalize Harbor Pi 0.80.6 JSONL into complete ordered message/tool/result/final/termination trajectories
• retain strict mogil.harbor-evidence v1 JSON/JSONL with separate private provenance and reviewer-safe projection
• bind sanitized reviewer evidence with reviewer_sha256 while retaining immutable raw hashes privately
• add safe batch upload CLI for BlindBench /ingest/v1/eval-runs
• add three public fictional coding tasks for real activation
• provide a narrow Harbor compatibility adapter for the Pi 0.80.6 npm package alias without host fallback or auth-file copying

Integrity and safety

• exact terminal stopReason == "stop" required after all linked tool results
• agent_end followed by Pi 0.80.6 agent_settled required
• canonical UTC chronology and strict eligibility invariants
• atomic JSON/JSONL/run writes followed by exact-byte checksum validation
• credentials, canaries, host paths, and provider/model provenance excluded from reviewer projection

Real activation evidence

Three real Harbor 0.18.0/local-Docker/Pi 0.80.6 trials passed with Anthropic Claude Sonnet 4.6:

• slug normalization: 15 events, 4 calls / 4 results
• inventory summary: 16 events, 4 calls / 4 results
• window merge: 17 events, 5 calls / 4 results / 1 handled error

All three are quality_eligible, passed hidden verifiers, have valid exact-byte bundle checksums, retained no credential bytes, and left zero containers.

Verification

• pytest -q: 71 passed
• Docker smoke: passed
• Ruff: passed
• mypy: passed across 13 source files
• three-run JSON and JSONL validation: passed
• cross-parser validation in BlindBench: 3/3 eligible
• git diff --check: passed

Closes #6.