v0.4.1: native embedding CFFI — full pipeline working, daemon-wired, HITL bug fixed

- Native backend returns 768-dim vectors via llama.cpp / C wrapper (/usr/local/lib/libllama_wrap.so)
- Wired :native into embed-object dispatch and exported from passepartout package
- Model preloads at daemon startup with EMBEDDING_PROVIDER=native (~30s)
- Lazy loading via *embedding-backend* :native also works (first call ~45s)
- C wrapper bridges CFFI pointer params to llama.cpp struct-by-value API
- Correct struct layouts: llama_model_params(72B), llama_context_params(136B), llama_batch(56B)
- BERT pooling: llama_get_embeddings_seq, llama_tokenize takes vocab* not model*
- FiveAM tests pass: dimensions, self-similarity, semantic ranking
- Fixed pre-existing HITL crash: boundp guard for *hitl-pending* in core-loop-act
- Lazy load guard prevents double-load of native file in embedding-native-ensure-loaded
- ROADMAP: v0.4.0 items marked DONE, v0.4.1 native embedding updated with actual implementation

org/core-loop-act.org

@@ -81,8 +81,10 @@ Because a skill's deterministic gate runs during Reason, but between Reason and
                                     (stream (getf meta :reply-stream)))
                                (when (and stream (open-stream-p stream))
                                  ;; Enrich response with differentiator visualization data
-                                 (setf (getf (getf action :payload) :rule-count)
-                                       (hash-table-count *hitl-pending*))
+                              (setf (getf (getf action :payload) :rule-count)
+                                    (if (boundp '*hitl-pending*)
+                                        (hash-table-count *hitl-pending*)
+                                        0))
                                  (setf (getf (getf action :payload) :foveal-id)
                                        (getf context :foveal-id))
                                  (format stream "~a" (frame-message action))