fix(runtime): stabilize live admission boot path (#102)

Make mutation policy weights explicit

Enforce mixed mutation bundles and fail-fast legality checks

Ground mutation-added vulns in real task paths

Merge pull request #52 from open-cybernauts/feat/issue50-canonical-base-graph-policy

Implement canonical base graph and mutation policy

Remove hardcoded infra, enforce snapshot-driven architecture

Add live admission for rendered child snapshots

Production all-in-one container with real service execution

Add snapshot lineage and parent-based mutation runtime (#49)

Full OpenRange implementation: environment, builder, validator, agents, tests