DF-4572 evidence pack — exca window leak on activation failure

Status: INCONCLUSIVE (PoC not runnable: guest has no CardBus/PCMCIA hardware).
The finding itself is a certain code-level defect; see VERDICT.md for the
full path:line trace and the on-hardware trigger procedure.

Contents:
  VERDICT.md    full narrative + reachability trace + trigger procedure
  run.sh        guest-side hardware-presence check (what was executed)
  run.log       output of run.sh on the audit guest (NO_CARDBUS_BRIDGE, ...)
  env.txt       guest uname + device state
  fix.diff      inspection-validated fix (releases the leaked window bits)
  manifest.json artifact catalog
  verdict.json  machine verdict (status: inconclusive; persist_poc-compatible)

Reproduce the *environment check*:  ./run.sh   (on the audit guest or any DF box)
Reproduce the *finding*: requires pccbb hardware — see VERDICT.md §Trigger.