v6.11.0 "Review Hardening"

[crypt0rr]

Summary

Prepares v6.11.0 "Review Hardening" from the validated Claude Ultracode review backlog.

• Fixes the four P2 findings: combinator dispatch, dry-run campaign execution, macOS Bash 3.2 compatibility, and digit-remover potfile extraction.
• Applies the applicable campaign, portability, JSON, cleanup, CLI, and EOF-hardening fixes.
• Expands deterministic coverage across all 22 processors and adds focused campaign and stats tests.
• Adds and enforces a Bash function-coverage baseline alongside the line baseline.

Validation

• make test-smoke
• make test-campaign (17 tests)
• make coverage (100.00% executable lines, 100.00% functions)
• make coverage-python (61.30%, baseline 48.47%)
• make lint
• git diff --check

The local format check could not run because shfmt 3.8.0 is not installed. Real Hashcat integration expansion remains deferred until the GPU runner is available (#85).