Add guarded Godzilla PFlash and KVFlash composition

[aivrar]

Summary

• add an exact-commit Godzilla preparation, build, and verification workflow
• add request-gated PFlash and bounded whole-idle-slot KVFlash residency
• enforce compatibility boundaries and truthful capability reporting
• update scanner, catalog, UI discovery, README, manuals, and attribution

Validation

• 356 passed, 14 skipped
• Python compileall passed
• exact Godzilla CPU llama-server build and verification passed
• invalid PFlash ratio fails closed
• staged patch check passed

Closes #44