fix(v1): enforce artifact transport boundaries - #2464

Eligibility
This production-path change hardens artifact transfer across the solver, host, and grading-runtime trust boundary while changing which archived filesystem entries are accepted. The resulting security and compatibility impact across Harbor and agentic judging warrants careful human review.

Notes:
No code owners found in target merge base 573bfa1