Dedup ct_eq + sando live_log into ops-core; put sando errors on JSON
Format the tree with rustfmt and add the lint + supply-chain gates
sando: typed-body envelope seal + confirm-modal coverage (UX/API A+, ultra-fuzz Run 2 deep Phase 5)