rootiest
a3853a93d8
A byte-identity gate CI never runs will rot, and a rotted gate is worse than no gate. Adds the render harness as Phase 4, in the same shape as the vault suite: its own process, its own sandbox, no loaded config needed. Kept to one self-contained block so it can be dropped or re-applied by hand if the runner is restructured. The functional suite's 317/317 count is untouched; the render cases report separately.