fix(ram): verify F09/F14 headroom and F15/F16 runtime recovery

Bound encoded quarantine and Redis recovery memory, verify actual principals, loaded metrics, held PostgreSQL SIGTERM and retention/drain rollback. Close F01 enrichment waits and preserve F13 decrypted/JSON summary contracts. All 479 backend tests, typecheck/build, 11 ingest integration and strict 5 operational gates pass.

.github/workflows/ci.yml

@@ -61,8 +61,13 @@ jobs:
       - run: npm run contract:check
       - run: npm test
       - run: npm run test:analysis-integration
+      - name: Configure bounded RAM Redis fixture
+        run: |
+          docker exec '${{ job.services.redis.id }}' redis-cli CONFIG SET maxmemory 96mb
+          docker exec '${{ job.services.redis.id }}' redis-cli CONFIG SET maxmemory-policy noeviction
       - run: npm run test:ingest-integration
       - run: npm run build
+      - run: npm run test:ram-operational
 
   frontend:
     if: github.event_name != 'schedule'