feat(propose-adjudicate-prove): overlay adjudicates inventory before prove

Regex inventory stays the proposer. MAP attaches promote/demote/unadjudicated/coverage
from intra-file taint (tree-sitter when a grammar parses, Python ast as last resort).
Deep sandboxes promotions only, ordered by the existing heuristic ranker plus optional
OpenRouter mechanism recall. The SAST pair slice scores overlay outcomes; the stage-1
detection gate and local pair gate stay inventory-only.

src/openultrasast/ruleset/semantic/java.toml

@@ -0,0 +1,31 @@
+version = "1"
+language = "java"
+
+[[source]]
+id = "servlet"
+patterns = ["getParameter", "getHeader", "getCookies", "readLine", "getQueryString"]
+
+[[sink]]
+id = "exec"
+cwe = "CWE-78"
+calls = ["exec"]
+rule_ids = ["java-command-exec"]
+
+[[sink]]
+id = "executeQuery"
+cwe = "CWE-89"
+calls = ["executeQuery", "execute", "prepareCall"]
+rule_ids = ["java-sql-injection"]
+
+[[sink]]
+id = "readObject"
+cwe = "CWE-502"
+calls = ["readObject"]
+rule_ids = ["java-deserialization"]
+
+[[sink]]
+id = "MessageDigest"
+cwe = "CWE-327"
+calls = ["getInstance"]
+rule_ids = ["java-weak-hash"]
+weak_literals = ["MD5", "SHA-1", "SHA1"]