EMAIL-WP-0005 T05/T06: evidence realism and harness documentation

Adds harness.deliver_raw() to inject crafted .eml fixtures through the harness,
so they pick up the real Received: headers an MTA adds, and
harness.inject_maildir() as the byte-exact offline counterpart.

tests/test_evidence_realism.py asserts all ten recognized evidence classes
after passing through a real MTA, proves MTA delivery does not change which
evidence is produced, and covers Maildir injection offline.

Documents what no local server can honestly produce -- provider-generated DSNs,
real 4xx deferral and retry, ISP feedback loops, provider suppression behavior,
MX acceptance as distinct from provider acceptance -- and names SES simulator
addresses as the staging path. That tier stays out of the test run because it
needs real credentials.

Adds docs/test-harness-tutorial.md covering the three test tiers and the
start/send/scan/assert/reset walkthrough, with an explicit
assertable/not-assertable list so the evidence ceiling is stated where tests
get written. Adds a Maildir section to the mailbox report tutorial.

Completes EMAIL-WP-0005. Suite: 85 passed with the harness up, 64 passed +
21 skipped with it down.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>

tests/harness/__init__.py

@@ -104,6 +104,40 @@ def smtp_provider(sender: str = DEFAULT_SENDER):
     return SMTPProvider(HOST, SMTP_PORT, sender, PASSWORD, sender, security="plaintext")
 
 
+def deliver_raw(recipient: str, raw_bytes: bytes, sender: str = DEFAULT_SENDER) -> None:
+    """Deliver a crafted message verbatim to a harness mailbox.
+
+    The harness accepts everything, so it cannot *generate* a bounce, complaint,
+    or deferral. Injecting a crafted `.eml` is how those classes are exercised:
+    the message still travels through a real MTA and picks up real `Received:`
+    headers, which a fixture read off disk never does.
+    """
+
+    import smtplib
+
+    with smtplib.SMTP(HOST, SMTP_PORT, timeout=10) as smtp:
+        smtp.sendmail(sender, [recipient], raw_bytes)
+
+
+def inject_maildir(maildir_dir, raw_bytes: bytes, *, name: str | None = None, subdir: str = "new"):
+    """Write a crafted message straight into a Maildir tree.
+
+    The offline counterpart to `deliver_raw`: no MTA involved, so the message
+    arrives byte-for-byte with no added headers.
+    """
+
+    import time
+    from pathlib import Path
+
+    root = Path(maildir_dir)
+    for required in ("new", "cur", "tmp"):
+        (root / required).mkdir(parents=True, exist_ok=True)
+    filename = name or f"{int(time.time())}.M{len(raw_bytes)}P{id(raw_bytes) % 100000}.harness"
+    path = root / subdir / filename
+    path.write_bytes(raw_bytes)
+    return path
+
+
 def mailbox_config(
     user_address: str,
     *,