nx_builder_authors_inet_fetch.nx

nx_builder_authors_inet_fetch.nx -- the BUILDER authors the team's SOVEREIGN internet-fetch modules (Claude does NOT hand-write them). TWO templates now: (1) ma_emit_inet_fetch -- the original PLAIN-HTTP fetch (sovereign DNS + nx_browse_text), kept intact. (2) ma_emit_h2_inet_fetch -- R4-H2 capstone NBC-FETCH-001: a sovereign HTTP/2-over-TLS GET that negotiates ALPN "h2" (h2-only ClientHello) and drives the team's OWN HTTP/2 client (preface -> SETTINGS -> HEADERS GET -> read HEADERS+DATA, HPACK-decode :status, reassemble body) over the existing TLS1.3 app-data path. The Builder USES the capability; the Engineer compiles+runs the authored organ against real hosts; Claude evaluates. KEEP author=organ: the Builder emits the source, it is not hand-written. HONEST: the authored organ NEVER fabricates a 200 -- an h2-refusing/walled host is a NEGATIVE rc + named diag in the durable status log; verdict=GREEN strictly iff a real h2 host returned :status 200 + non-empty body. license_tier: ORIGINAL