Add PAM bypass reconciliation gates

[malb200710-dev]

Summary

• Adds a direct access bypass evidence gate to the privileged-access skill.
• Compares PAM/JIT records with native platform logs across Linux, Windows/AD, AWS, Azure, GCP, Kubernetes, and databases.
• Adds bypass reconciliation reporting and version history for v1.0.1.

Validation

• Local marker check passed for version 1.0.1, direct bypass gate, reconciliation table, output fields, and version history.
• Fenced code block count is even.

Closes #2293

Bounty consideration requested if this review gap is accepted.