feat(qualification): capture local institutional judgment cases

[abrichr]

Summary

Adds the optional Desktop qualification path for reviewed institutional-judgment cases.

• Captures reviewed typed facts, source provenance, a local evidence inventory, optional local review note, contrast cases, and the three disposition states.
• Creates a reciprocal automatic-rule pair atomically when the reviewer records a contrast case.
• Uses only Flow-owned local contracts and the qualification.set_judgment_cases capability.
• Preserves direct decision authoring as the fast path.
• Does not create a runtime decision, a signer, a policy inference path, or a VERIFIED outcome.

Dependency

This draft depends on Flow PR #344. The embedded Flow pin stays unchanged until a reviewed Flow release exists.

Validation

• Focused UI tests: JudgmentCaseCapture, BusinessDecisionAuthoring, Qualification
• Production UI build
• Python compile: engine/qualification.py and engine/dispatch.py

[abrichr]

Launch disposition: keep this PR as a draft and defer it. Do not merge it for the current launch.

This PR does not supply current production qualification-campaign evidence. Its exact head still pins Flow 1.27.1, so the judgment-case capability is unavailable and the new UI stays hidden in the installed runtime. The surface also accepts manual evidence paths, digests, reviewer roles, and reviewer-principal digests. That input is not authenticated, capture-backed campaign proof.

Smallest future v2 subset: for a certified workflow that uses judgment cases, bind the Flow-owned judgment evidence-contract digest and deterministic judgment report into the qualification certificate, admission decision, and terminal v2 proof. Bind an authenticated reviewer principal and a runner-verified local evidence inventory. Do not treat the manual capture UI or self-entered hashes as v2 proof.

Resume the broader authoring UI after it has a frozen Flow dependency, first-schema authoring or import, local file selection with hash verification, authenticated reviewer identity, revision/CAS handling, and one end-to-end certification test.