Merge origin/main into codex/issue-78-80-20260308

fix(validator): add structured exec results and strict patchability outcomes

validator: fail patchability on remediation/retest inconclusive

Remove hardcoded fallbacks, add snapshot-driven service lifecycle

Production all-in-one container with real service execution

Full OpenRange implementation: environment, builder, validator, agents, tests