#3745 S2: cli-surface extractor + derived release cells (pairwise) — release-readiness-v1 targets the derived set, VERBS deleted #3777

Part S2 of #3745 (owner aprender-97, routed by the cop). Its own id, so the parts don't collide on PMAT-3745; S1 is #3749.

done_when (quoted verbatim from #3745 issuecomment-5764661626 and the S2.5 amendment issuecomment-5765674584)

• S2.1 A pv extractor cli-surface, registered implemented in contracts/ontology.yaml, with its own pc_extract planted control (the PMAT-3704 / ONT-4c3: pc_extract draws one planted defect per implemented extractor — parity-receipt, json and pv-contract gain their controls, and the set is tied to Σ #3706 Σ-tie).
• S2.2 The cell set is computed: every model-role command × host-inventory models × input shapes × mode args (a deterministic pairwise covering array) × thinking × rung. Commands without a model owe one runs-or-refuses cell. The derived cell count is printed in the receipt.
• S2.3 release-readiness-v1 targets the derived set through Inputs.cells, and release_evidence.rs's VERBS const is deleted. Issue mutants 1 and 2 are RED.
• S2.4 :CruxCell plus the per-verb CRUX mapping entry (CRUX inference dogfood, every release: the SAME GGUF + SAME prompts through apr, llama.cpp and ollama, per verb (run / chat / serve / code) on lambda and gx10 — apr must be right wherever a competitor is right #3739): a derived verb with no mapping entry is a violation.
• S2.5 The flag-effect oracle: for every derived mode arg, some cell must exist where toggling it changes the observable output: stdout bytes, the JSON fields, or the token ids. A mode arg with no observable effect on any cell is RED unless its typed marker (S1) declares it a no-op for that model class, with the class named. Sampling args additionally carry a8's controls: sampled ≠ greedy for some seed; the same seed ×2 byte-identical; seed A ≠ seed B; top-k 1 / T 0 byte-greedy.

Cop rulings on the design note (issuecomment-5765981405)

D1 pairwise over modes ∪ {input shape, thinking, rung}, per (command, model, host), plus a projected wall time per host · D2 a typed generates field on the surface (fc adds it to S1) · D3 one-factor-at-a-time cells for S2.5, per representative model per arch, plus output_sha256 in cells[].

Refs #3745 #3715 #3749 #3739 #3712