verify-gates

Run the full local mirror of CI (the project's "definition of done") and report what passes/fails. Use before declaring any change done, before opening a PR, or when the user asks to verify. Mirrors .github/workflows/ci.yml plus the cross-cutting constitution gates.