feat: implement numbered patch-stack apply/verify enforcement (DGR-028)

Split the range-loader patch into single-concern patches 0002-0005 (loader,
filtered state report, boundary I/O endpoint guard, worker range-report
hook), add UPSTREAM-ASSUMPTIONS.json describing each patch's assumptions,
and enforce control-plane/license boundary checks plus first-incompatible-
patch reporting in scripts/llama_cpp_dependency.py apply/reverse/verify.

7 passed in tests/test_llama_cpp_dependency.py; SHA256SUMS verified against
all five patches; focused native CTest (test-meshnet-range-ownership 1/1)
recorded in evidence README (build/ dir not present in this environment to
independently reverify).

tests/test_llama_cpp_dependency.py

@@ -240,7 +240,9 @@ def test_dependency_script_reports_the_locked_boundary_without_network() -> None
     report = json.loads(completed.stdout)
 
     assert report["commit"] == (LLAMA_DIR / "UPSTREAM_COMMIT").read_text().strip()
-    assert report["patch_count"] == 2
+    assert report["patch_count"] == len(
+        (LLAMA_DIR / "patches/series").read_text().splitlines()
+    )
     assert report["model_downloads"] is False
     assert report["semantic_certification"] is False
     assert "dense" in report["glm_stock_limitations"].lower()