fix(reddog): classify live valve intent as high authority

[Foundup]

What

• classify VALVE_OPEN_WORKTREE_CREATE and VALVE_OPEN_LIVE_ENQUEUE as HIGH authority across signer, authority-profile seed, and authority-profile source boundaries
• normalize the effective valve state before both classification and serialization
• require both consensus and sovereign authorization evidence for either high-authority valve state
• preserve existing LOW VALVE_OPEN_DRYRUN_ONLY behavior

Why

Authority tier previously depended only on requested_operation. A generic feature_slice could therefore carry worktree/live valve intent as LOW authority. An empty valve input also classified LOW before later defaulting to WORKTREE during serialization. Both paths could bypass the required sovereign/consensus evidence.

Truth boundary

This PR changes authority classification only. It does not create an execution-valve artifact, open a valve, start a signer, execute a worker, call a model, create a worktree, or publish a PR from RedDog.

Verification

• independent audit: no P0/P1
• 45 focused tests passed
• WORKTREE + LIVE classification covered at signer/seed/source
• missing consensus and/or sovereign evidence rejects
• None/empty normalization adversaries reject
• LOW dry-run behavior remains unchanged
• WSP22 ModLog/TestModLog updated
• git diff --check clean