* test(mantis): bound Telegram proof cleanup * test(mantis): enforce cleanup deadline in wrapper * test(mantis): supervise cleanup through bash
* fix(qa): allow restricted Mantis worktree traversal * fix(qa): pin Mantis harness checkout revision * fix(qa): isolate Mantis candidate execution * fix(qa): harden Mantis teardown