fix: permanently retire Global ETF research mandate

[Pigbibi]

Summary

• permanently retire exact mandate ID global_etf_rotation_etf_only_research_v1
• reject it before generic mandate parsing, while preserving exactly-once RiskEngine assessment
• restore PR feat(risk): add Global ETF research mandate contract #303's two paths to its parent behavior except for the minimal retirement guard, finite-number fail-closed handling, and regression tests
• preserve PR feat(risk): freeze TQQQ ETF-only research mandate #302 TQQQ, SOXL, bootstrap, and generic mandate semantics

Safety behavior

Every retired-ID request returns REJECT with positions and budgets cleared and execution_authorized=false. Malformed, non-finite, and oversized numeric material cannot escape the fail-closed result.

This is terminal revocation only. It grants no research promotion, deployment, runtime, paper, shadow, live, order, or capital authority.

Verification

• tests-first RED: 7 failures / 1 pass, including oversized-integer OverflowError and missing explicit retirement reason
• retired-mandate focused: 3 passed, 5 subtests passed
• risk gate full: 49 passed, 76 subtests passed
• full suite: 935 passed, 1 skipped, 136 subtests passed
• Ruff, compile, lock/dependency, package/import, scope2, secret, provider URL, and diff gates: passed
• package wheel SHA-256: da3894611d4cf73c9645abc4a65c22f468be79c2762b810e60097d7e92f8430c
• package sdist SHA-256: 41ab60de0abe27c99d095679df85cc901c58aff408d4891bd9368e984fe8f7c0

No remediation is authorized on this PR. Any new material exact-head blocker closes the PR unmerged and parks the slice.

[chatgpt-codex-connector]

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: e5a5c790fd

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

• Open a pull request for review
• Mark a draft as ready
• Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".

[chatgpt-codex-connector]

Sanitize malformed metadata before issuing retired rejection

When a request uses the retired mandate ID but contains malformed position or budget metadata, this early return only seeds the rejection reason and still proceeds to _canonical_digest(decision_payload). Fields such as PositionTarget.role, order_preference, or BudgetIntent.unit are copied without validation, so a value like float("nan") raises ValueError under allow_nan=False instead of returning the promised terminal REJECT with cleared exposure. The retired path should sanitize these receipt fields or otherwise guarantee the rejection after the exactly-once engine assessment.

Useful? React with 👍 / 👎.