feat: Phase H H5 no-silent-network policy for adapters

[cschanhniem]

Summary

• Adds NSN- no-silent-network policy schema (src/openamp_foundry/simulation/no_silent_network_policy.py)
• Detects undeclared network calls from simulation adapters and sequence-data exposure risk
• SEQUENCE_EXPOSURE_KEYWORDS tuple drives keyword-based risk detection on call endpoints
• 49 tests; BASELINE updated 11034→11083; H5 marked complete in NEXT_100_PR_MAP.md

Design

• declared_network_calls: what the adapter claims it calls
• observed_network_calls: what it actually called
• undeclared_calls auto-computed as observed minus declared
• sequence_exposure_risk auto-detected via keyword scan of all endpoint strings (case-insensitive)
• policy_verdict precedence: undeclared_calls_detected > sequence_exposure_risk > compliant
• dry_lab_only=True always enforced; dry-lab mode expects zero observed network calls

Safety

• Prevents silent sequence leakage via adapter side-channels
• Undeclared calls force pipeline failure before any results are returned
• Does not weaken any existing safeguard

Test plan

• 49 unit tests pass (constants, build, validate, format)
• BASELINE regression test passes (11083)