Operating Nika workflows

Operating prepares a workflow for unattended use: review spend exposure, declared effects, secret destinations, model choice and available traces.

The check reports readiness; it does not authorize unattended execution. Carry out execution already authorized by the user within its effects and spending scope, through the normal engine and host gates. Ask only for a decision still missing; permission to run does not supply a human-gate answer. Judge clean (the exit's verdict under the flags you passed; under --native-strict the refusal is a findings[] row and native_strict_clean repeats clean), paid_ready and resolved-child coverage separately, with the engine/spec identity that produced the report.

Spend (the envelope is part of the contract)