fix(reducer): always queue embed-reduce + warm-load embedder on boot

chore(qa): phase 5 — static audit baseline + findings recorded

test(qa): phase 3 — integration tests against fakes + RLS SQL files