test(runtime): read leave_organization's variant leg with its bucket-C override set aside

leave_organization now declares ai.requiresConfirmation: true (ADR-0011's
2026-10-30 addendum, bucket C), and the declared override is read before the
variant, so "still destructive off variant alone" passed without reading the
variant. The case now asserts the declared flag on its own and classifies the
real declaration with the override set aside; dropping the variant there
turns it red.

Co-authored-by: Claude <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_016WV4czk9umSFBVoz5cijzX

Author: claude

packages/runtime/src/action-execution-destructive.test.ts

@@ -214,6 +214,12 @@ describe('sibling identity actions with a declared destructive signal still read
         const action = actionByName(SysOrganization, 'leave_organization');
         expect(action.variant).toBe('danger');
         expect(action.mode).not.toBe('delete');
+        // ADR-0011's 2026-10-30 addendum exposes it in bucket C, and its declared
+        // `ai.requiresConfirmation: true` is read before the variant — so the
+        // variant leg is read with that override set aside, and the declared
+        // flag is asserted on its own.
+        expect(action.ai?.requiresConfirmation).toBe(true);
+        expect(actionLooksDestructive(deps, { ...action, ai: undefined })).toBe(true);
         expect(actionLooksDestructive(deps, action)).toBe(true);
     });
 });