T08 iter 4: GROUND-OU/ND choices and Support consent

Closes the three rules deferred in iter 2 and 3 because each needed a
decision from a player rather than a default I would have invented:

- GR-A11 GROUND-OU: restore a Denied Problem, protect a face-up one
  from Deny, or cancel an Attack aimed at the chooser.
- GR-A12 GROUND-ND: remove a Blame token, break a relation involving
  the chooser, or reject a Reverse.
- GR-L02 / GR-A05: the Support target answers after Reveal — accept or
  decline a Bond where no relation exists, flip or break an existing
  Rivalry. A Bond can no longer form without consent.

Each choice is validated against the state it claims to act on: a
restore needs a Denied Problem, a cancel needs an Attack actually aimed
at the chooser, a Blame removal needs that token present, a break needs
that relation to exist. GR takes no sub-choice, and OU and ND may only
use choices from their own list.

GR-A09 ordering follows the U8 default: an OU cancellation is chosen at
step 1 and applies first, so a Protection token is spent only when it
is what actually cancels.

14 scenarios pass; AM-1 coverage 41/58 (70%), up from 34/58.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>

scenarios/ground/gr-a11-ground-ou.yaml

@@ -0,0 +1,43 @@
+scenario: ground/gr-a11-ground-ou
+description: >
+  GROUND—OU restores a Denied Problem (GR-A11), and a Denied Problem is
+  not otherwise revealable (GR-P02). A mode's sub-choice must belong to
+  that mode (GR-A10).
+covers: [GR-A11, GR-P02, GR-P01]
+provisional: false
+seed: 42
+setup:
+  players: 3
+  preset: standard-3p
+  patch:
+    "lead": 0
+    "problems.2.denied": true
+commands:
+  - actor: P1
+    cmd: select_action
+    args: { action: GROUND }
+  - actor: P2
+    cmd: select_action
+    args: { action: INVESTIGATE, problem: 3 }
+  - actor: P3
+    cmd: select_action
+    args: { action: INVESTIGATE, problem: 3 }
+  - actor: SYSTEM
+    cmd: reveal
+  # GR-A10: GROUND—GR takes no sub-choice.
+  - actor: P1
+    cmd: choose_ground_mode
+    args: { mode: GR, choice: restore_problem, problem: 2 }
+  - actor: P1
+    cmd: choose_ground_mode
+    args: { mode: OU, choice: restore_problem, problem: 2 }
+  - actor: SYSTEM
+    cmd: resolve
+expect:
+  events:
+    - kind: ProblemRestored
+      problem: 2
+  state:
+    "problems.2.denied": false
+    "problems.2.face_up": true
+  rejects: [4]