Require typed authority before crypto execution

[Pigbibi]

Summary

• pin BinancePlatform to the accepted QPK typed-authority revision
• require QPK-produced MEMBER and ACCOUNT APPROVE assessments bound to the exact decision, candidate identity, and portfolio snapshot
• fail closed before breaker, trend, BTC DCA, and BNB order paths when authority is missing, rejected, stale, non-finite, or mismatched
• keep CryptoStrategies pin unchanged and preserve runtime disabled/dry-run-only containment

Validation

• focused: 43 tests passed
• full: 144 tests passed
• Ruff and Python compile passed
• uv lock --check, uv sync --frozen --extra test, and uv pip check passed
• exact scope: 16 authorized paths; diff/secret checks passed
• package build retains the clean-base setuptools flat-layout failure

Merge boundary

Keep this PR OPEN_UNMERGED. Platform pin/execution changes require a human exact-head merge decision.