feat: give Patient Zero a bounded cleaner threat feed

[christopherjnelson]

Summary

• give the single Patient Zero a current-interval global feed of successful cleans and occupied-cell blocks
• attribute events to affected agents and alliances while excluding cleaner movement, live position, route, identity, target, and future timing
• cap the feed at the most recent 128 events with truthful totals and truncation
• surface deduplicated cleaner evidence in Behavior Trace and preserve it in safe/SQLite exports
• document the observation, privacy, export, and testing contracts in ADR 0023

Validation

Repository owner confirmed the following local validation is green:

• pnpm format
• pnpm validate
• pnpm test:e2e

Notes

• no cleaner mechanics or model-call count changes
• ordinary agents retain their existing bounded local threat evidence
• custom exports that exclude recent control changes redact both local and Patient Zero cleaner-event arrays