Cleanup: drop legacy support-ops cruft now that DriftShield is the only collection

feat: GRPO training stack (Qwen3 + Unsloth opt-in, curriculum, eval, audit)

clean rewrite: shorter vars, no comments, same logic