fix(reddog): confine runtime artifacts and redact DAEmon telemetry

[Foundup]

WSP 97 truth boundary

OBSERVED: resident runtime paths accepted source-tree overrides and DAEmon persisted raw untrusted log text into repository artifacts.

Changes

• confine resident runtime roots and files outside the repository
• reject device, UNC, ambiguous, symlink, junction, and hardlink paths
• verify descriptor final paths before any append/replacement/read
• validate existing receipt JSONL and use cross-process locked, fsynced appends
• move DAEmon state/reports outside the repo and serialize cross-instance scans
• redact before truncation and recursively sanitize supervisor/PatternMemory payloads
• reject external and junction-swapped log reads

Validation

• shared runtime safety: 11 passed, 1 skipped
• resident confinement: 7 passed, including 8-process concurrent append
• resident profile/manifest/preflight: 35 passed, 2 skipped
• DAEmon self-audit: 18 passed
• OpenClaw supervisor: 28 passed
• signed-worker suite: 46 passed; 2 failures reproduced unchanged on origin/main
• py_compile and git diff --check: PASS

Boundary

No authority expansion, worker spawn, HoloIndex mutation, source execution, merge, or reward settlement.