Allow verified Windows calculation native bootstrap

[monarchjuno]

Summary:

• allow pinned calculation packages to initialize process-local ctypes and load only absolute native files inside the verified runtime
• continue denying scratch-origin FFI, bare/system library names, raw integer handles, and external paths
• add runtime/scratch boundary regressions and clearer platform-smoke import diagnostics
• document the narrowed native bootstrap contract

Validation:

• calculation runner focused tests
• release contract and platform runtime focused tests
• compileall for the runner and platform smoke
• diff check

This unblocks the explicitly dispatched v1.1.2 Windows release matrix; no automatic publish path is added.