Phases 4-7: nested inference prompt, delegation reward, Delegation Score grader, multi-agent README

Phase 3: server-side sub-agent infrastructure (spawn / budget / return)

Multi-agent foundations (Phases 1+2): dynamic attack surface + revealed_targets

first commit