nx_swarm_admit_gate.nx

nx_swarm_admit_gate.nx -- gate for the general swarm admission capability. T1 PURE verdict table (deterministic, the SOTA-honest core): idle->GRANT, load>=ncpu->DENY-LOAD (the anti-load-105 tooth), low-RAM->DENY-RAM, at-concurrency-cap->QUEUE, headroom-ok->GRANT. T2 precedence: DENY-LOAD beats DENY-RAM beats QUEUE (a saturated box denies before queuing). T3 live smoke: sa_admit_live reads real telemetry and returns a VALID verdict (0..3); a tiny est with a huge concurrency cap on a non-saturated box must not spuriously DENY-RAM. license_tier: ORIGINAL expect_exit: 0