quantum phase 2: finalize manual verification and auto-apply lifecycle gas floor — adds fork-side key_id == 0 invariant on bootstrap requests, moves KeyVault lifecycle-selector rejection into cast send pre-build (matching both Solidity and raw-hex sel#3