feat(groom): bwrap sandbox harness + key-broker with deterministic CI proofs (BE-4302) #62

Job	Run time
cursor-review / Gate	3s
cursor-review / Notify start	0s
cursor-review / Diff size check	0s
cursor-review / Preflight — validate model catalog	0s
cursor-review / ${{ matrix.review_type }} (${{ matrix.model }})	-1s
cursor-review / Consolidate panel	-1s
cursor-review / Notify complete	-1s
	0s

Provide feedback