Backtest Audit Trail For Regulatory Review

Use when a backtest result needs a durable record of exactly what produced it: git commit SHA, per-file data checksums, hyperparameter manifest and environment, signed with HMAC for integrity against outsiders.