Add advanced defensive-control experiments

[maximalfocus]

Summary

• connect all eight advanced defensive controls to deterministic closed transition or metric boundaries
• add runtime validation for control values and bounded concurrency
• add an accessible local experiment form and complete selected-control reporting
• suppress decisive-control attribution whenever multiple controls change

Verification

• npm test — 23 tests passed
• npm run typecheck — passed
• npm run lint — passed
• npm run build — passed
• git diff --check — passed
• safety scan — no networking or process-execution APIs in src

Closes #7