feat: project character trust to table.evaluation/1.0

[chaoz23]

Summary

Projects CharacterCheck's canonical field assessments into the shared
table.evaluation/1.0 contract from chaoz23/table-kit#11.

This is rebased directly on released CharacterCheck main at 876f4a1, after
#31 and the 0.7.0 schema/release work merged. It preserves version 0.7.0 and
does not broaden the native derivation, MCP, privacy, content, or authority
boundaries.

Contract behavior

• adds --table-evaluation to derive and report
• emits field states, authority labels, bounded evidence codes, and digests;
  character values and identity names are never copied into the envelope
• counts trusted fields as evaluated and fails closed for unsupported, unknown,
  invalid, and non-authority confirmation states
• treats mutable player-authority fields as out-of-scope advisories requiring
  player/session-host reconciliation
• maps public input/runtime failures to typed, privacy-safe shared refusals
• binds subject/input identity to the canonical mechanical source revision and
  policy context to the rules profile plus adapter/source-schema fingerprints
• always emits authority_status: self_attested; this remains pre-session
  character context, not source authentication, freshness, table role,
  encounter state, or action legality

The package exports project_table_evaluation(report) for a suite host that
already uses the canonical Python API. Native behavior is unchanged when the
explicit flag is absent.

Validation

• 310 tests pass on local Python 3.9, 3.12, and 3.14 with resource warnings
  promoted
• unsupported, checked-with-advisories, incomplete, and invalid projections
  pass table-kit's actual JSON Schema and semantic validator
• repeated projection is deterministic across observation timestamps
• private refs, character names, and character values are absent from shared
  envelopes
• pinned wheel/sdist build succeeds; the cold-installed wheel imports the
  projector and emits a fail-closed shared result outside the checkout
• JSON, compilation, and whitespace checks pass

Dependencies / sequencing

• Establish agent-safe read-only foundation #31 and the 0.7.0 schema/release sequence are merged; this PR targets main
• schema dependency: Establish shared evaluation and event contracts table-kit#11
• follow with a table-kit hosted gate pinned to this exact commit
• relates to TRUST-001 — One canonical derived report and no weaker downstream trust #7 and CLI-001 — Versioned CLI envelopes, disjoint exits, strict flags, and NDJSON #18 without closing their broader acceptance criteria
• no package release, MCP expansion, or authority expansion is included