feat(propose-adjudicate-prove): overlay adjudicates inventory before prove

Regex inventory stays the proposer. MAP attaches promote/demote/unadjudicated/coverage
from intra-file taint (tree-sitter when a grammar parses, Python ast as last resort).
Deep sandboxes promotions only, ordered by the existing heuristic ranker plus optional
OpenRouter mechanism recall. The SAST pair slice scores overlay outcomes; the stage-1
detection gate and local pair gate stay inventory-only.

benchmarks/pairs/github/sven-cwe-089-query-concat/fixed.py

@@ -0,0 +1,14 @@
+# Provenance: SVEN train CWE-89 function pair from
+# https://github.com/pukkapies/urop2019/commit/3ca2e2c291d2d5fe262d20a8e0520bdfb622432b
+# file modules/query_lastfm.py function tag_num_to_tag
+
+
+class QueryStore:
+    def tag_num_to_tag(self, tag_num):
+        """Returns tag given tag_num."""
+        q = "SELECT tag FROM tags WHERE rowid = ?"
+        self.query(q, tag_num)
+        return self.c.fetchone()[0]
+
+    def query(self, q, *args):
+        return q