feat(deploy): gate claims on pinned runtime readiness

Assistant: codex
Assistant-Model: gpt-5.6-sol
Assistant-Session: 01a06ba0-10aa-7ea0-b20a-4f3fac39efe9

scripts/verify-runtime-contracts.sh

@@ -0,0 +1,17 @@
+#!/usr/bin/env bash
+# CI/release gate: absence of optional runtime packages is a hard failure.
+set -euo pipefail
+
+REPO_ROOT="$(cd "$(dirname "$0")/.." && pwd)"
+cd "${REPO_ROOT}"
+
+PYTHON_BIN="${REIN_CONTRACT_PYTHON:-${REPO_ROOT}/.venv/bin/python}"
+"${PYTHON_BIN}" scripts/verify_runtime_lock.py
+"${PYTHON_BIN}" -c 'import glas_harness.contract, llm_connect, sandboxer.models'
+PYTHONPATH="${REPO_ROOT}:${REPO_ROOT}/../llm-connect" \
+  "${PYTHON_BIN}" -m pytest \
+  tests/test_glas_execution.py \
+  tests/test_ops_run_client.py \
+  tests/test_claim_loop.py \
+  tests/test_readiness.py \
+  -q