feat: run the eval worker inside the Space (CPU, isolated venv)

feat: complete the eval engine — real worker + OEB-aware queue reader