Round 2 Implementation: Multi-period campaign, regulatory shocks, adversarial grading, and GRPO training infrastructure

feat: v2.0 — fraud detection task, severity grading, investigation mode, security hardening, 78 tests