feat: project rules verdicts to table.evaluation/1.0

[chaoz23]

Summary

Projects one scoped native SRDCheck verdict into the shared
table.evaluation/1.0 contract from chaoz23/table-kit#11.

This remains an opt-in public interface: Python callers use
project_table_evaluation, CLI callers add --table-evaluation, and MCP
callers use the generic table_evaluation tool. Native query-tool response
schemas are unchanged.

Contract behavior

• a checked_clean result means only that the exact named rules query passed;
  the scope is machine-readable in subject.entity_refs
• illegal verdicts become findings only with exact evidence; every
  evidence_ref resolves in a self-contained evidence catalog
• missing facts are compatible/eligible but unevaluated; unsupported and
  invalid inputs are neither compatible nor eligible
• optional caller context carries stable session/entity/correlation references
  (correlation_id is represented as a typed correlation:* entity ref)
• every result is self_attested, including when the calling agent is the DM;
  table rulings and protected-host authority remain separate
• illegal verdicts without evidence and incoherent native verdicts fail closed

Validation

• 644 tests passed + 3 expected skips
• wheel and sdist cold-artifact smoke pass, including the MCP projection path
• exact table-kit PR New query: cite <name> — return the verbatim SRD text block for any named content, with page #14 JSON Schema and semantic validation pass for
  checked_clean, findings, incomplete, unsupported, and invalid
• all bundled adapter conformance suites, hygiene, golden verdicts, truth
  scorecard, generated capability maps/tool inventory, and whitespace checks pass

Dependencies / sequencing

• schema dependency: Establish shared evaluation and event contracts table-kit#11
• installed cross-repository consumer gate: ci: enforce installed srdcheck result conformance table-kit#14
• do not merge this PR until Handlers silently ignore unrecognized params → confident wrong-looking verdict (declared inputSchema isn't enforced) #11 is merged and New query: cite <name> — return the verbatim SRD text block for any named content, with page #14 is rebased/green against
  the exact merged contract
• no package version bump, release, or authority expansion is included