Announcement Validation V1

Stage 6 Manual Control

Cross-tenant write-denial probe with an empty announcement payload. A membership_required denial plus a clean post-probe state is the only passing result.