Fix lint packaging and fail closed runtime paths (#93)

Implement issues #72 #74 #75 env grounding and console scope

Ground Red/Blue rewards and finding validation

fix(runtime): preserve per-host service specs and role-aware routing

Remove hardcoded fallbacks, add snapshot-driven service lifecycle

Merge upstream changes, resolve conflicts

Add task engine, exposure policy, auth scenario, pivot mechanics, curriculum wiring

Full OpenRange implementation: environment, builder, validator, agents, tests