SafeTune refusal direction for tiny-aya-global + the negative result: inference-time steering does not move encoded-attack ASR.