FEATURE-ci-kqueue-focused-diagnostics: Add bounded native trace capture

Preserve the original 48-case kqueue component and semantic trace operations, emitting complete vectors after collection. Add a durable nonresumable 64-attempt driver and a manual-only read-only Darwin workflow using the original TLS-off installed-static O0/g context.

Verification: 16 offline fake-child/source/workflow contracts, source reconstruction, changed-file cpplint, actionlint, shell/Python syntax, and compile-only emitter syntax passed. Native kqueue attempts/comparisons remain 0/64. Caller validation and one approved native dispatch remain pending; this diagnostic branch must never merge into v3.

Author: etr