fix(security): normalize concealed instruction text

[Spectorian]

Summary

• normalize security-analysis text with version-pinned default-ignorable handling
• reconstruct bounded inter-character separator runs with exact gap signatures and raw source-offset attribution
• add a scored analysis-evasion signal for security-relevant condensed terms that cannot be reconstructed safely
• treat confirmed inter-character obfuscation as a nonfatal interpretation limit so strict CLI and MCP consumers fail closed
• preserve benign multilingual text, emoji, punctuation, notation, URLs, e-mail addresses, tables, and code through negative controls

Validation

• sanitized static-only coverage for ASCII whitespace, punctuation, symbols, middle dot, and bullet separators
• analyzer, SARIF location, cross-window, resource-limit, and false-positive regressions
• completeness parity across reports, default and strict CLI modes, and MCP install verdicts
• branch-wide non-integration/non-provider suite
• Ruff lint, format, targeted mypy, and git diff --check