Phase X: contamination-safe submission flow (we host the agent)

Phase C: MCP toggle (reference vs custom) + tighten rate limit to 1/month

feat: add submission & scoring infrastructure (eval_scorer, dispatcher, boltz, queue, tasks) + fix gradio 5.x for Python 3.13