ci(validation): run portable tests through ordinary shards

[8Dionysus]

Summary

• run the existing portable-source CI step through the owner-local static2 subprocess route
• bind runner targets to the authoritative lane and reconcile the merged privacy-core test in the lane/evidence graph
• isolate ordinary bytecode per invocation and surface completed-shard failure tails without changing release authority

Evidence

• current lane/runner/graph target order agrees: 14 files, 1296 collected node IDs
• ordinary two-product-test smoke: 2/2 with complete coverage and no receipt (19.19s with normal plugin autoload)
• same-size/same-mtime product mutation: stale PYTHONDONTWRITEBYTECODE direct run falsely passed; fresh-prefix ordinary route failed the affected node
• focused validation/graph tests: 26 passed; py_compile, Ruff, diff check, decision parity, and public-tree audit (blocking=0) pass
• historical pre-privacy 13-file/1286-node trial remains explicitly separate; required CI is the current full route

Full evidence: /srv/abyss-machine/tmp/ai/validation-goal-review-20260904/SESSION-PARALLEL-ROUTE-20260906.md

No product start-method, xdist, receipt authority, release/package gate, or deployment changes.