Qualify behavior before template-copy acceptance

[referencefield]

Development-only hardening; this does not start acceptance.

Changes:

• add Gate 2B so the exact frozen candidate must pass independent behavioral/adversarial qualification before Gate 3 zero-reading template-copy acceptance
• keep behavioral evidence outside the frozen candidate tree during Gates 1–6, then publish the compact summary to EVAL_RESULTS.md during the prescribed Gate 7 release transition
• require explicit Gate 3 evidence metadata for reproducibility without copying private memory content
• add stdlib-only validator regression self-tests covering baseline PASS, bootloader drift, main-push trigger drift, and supported-plan manifest drift
• run validator self-tests in CI before structural validation
• require validator self-tests against the exact frozen candidate in Gate 2 and after corrective/release transitions

Protocol remains unreleased/development.