Refactor responsibility boundaries and tighten dogfood debt

[akcorca]

Summary

• split large evaluator, CLI, configuration, and test-support modules along explicit ownership boundaries
• introduce a Promise evidence DSL and shared direct-call contract fixtures while keeping behavioral assertions local
• consolidate only genuinely shared cross-frontend CST lowering policies and use a typed callee-dependency proof query
• lower the self-dogfood budget to 20 and remove four resolved duplicate-family IDs
• replay the Type-4 blind-attacker receipt for the new crates tree and synchronize the evidence inventory

Design notes

The reductions in file size come from moving cohesive responsibilities behind named modules or contracts. Language-specific lowering policy and consumer-specific test assertions remain local rather than being hidden behind broad helpers.

Validation

• cargo test -p nose-frontend — 340 passed
• cargo test -p nose-normalize — 282 passed
• cargo test -p nose-semantics — 364 passed
• focused Promise tests — 29 passed
• cargo clippy --workspace --all-targets -- -D warnings
• formatting, docs, file-length, evidence-lifecycle, and soundness gates
• release-binary self-dogfood — 16 substantial families / budget 20
• Type-4 blind attacker — 54 exact groups, 0 false merges, 0 canon violations