Governance Activation Readiness

Pre-flight checklist derived from the effective configuration. Resolve every failure and review the warnings before enabling governance or moving a capability from shadow (DryRun) to enforcing.