fix: bind Flow admission candidates to retained trial outcomes

[abrichr]

The existing Flow admission names 1.34.0. The published 1.35.0 wheel has retained failures in attended continuation and encrypted repair, so this change keeps its candidate explicitly incomplete.

The candidate builder verifies retained artifact hashes, derives campaign totals from individual observations, and checks each trial's required events. It compares normalized outcomes with native runtime reports and checks every installed runtime member against the exact wheel. A decision receipt cannot turn COMPLETED_UNVERIFIED into a verified effect.

The unpublished 1.35.1 successor now passes the verifier with 36 selected trial groups and 1,617 inventoried artifacts. The retained candidate reports ready-for-release-review, with publication and admission still false. It binds source aed32758b7342c61787a3b56fe940e1e9f2d648a and measured manifest sha256:2cd3b47a9c1fc3d81b1207e7f64441d82ad7f0f62babf49d8ffde6ae2ac2c7ca. Reviewers must examine the retained measurement code and independent oracle evidence before accepting it. These consistency checks don't establish that a process executed or grant release authority.

Validation: 24 focused tests pass. Independent review reproduced and closed mismatched-observation counts, events concentrated in one trial, omitted normalizer source, native unverified outcomes, altered installed members, and incorrect runtime identity. Lint and format checks pass. All 294 repository unittest checks pass with the standard test runner.

The 42 complete raw trial groups include six named exclusions and retain 54 native phase reports. Two incomplete repair instrumentation/restart attempts also remain retained and excluded. Safe-halt class membership overlaps with reconciliation-required outcomes; these counts do not define an aggregate success percentage. The candidate README records the exact selection and both remaining identity-OCR limitations.

The builder has no key access or registry writes. Merge, protected-main qualification, immutable publication, artifact parity, and admission issuance remain separate required actions.

Opened by an agent session, not the founder.