Description:
Enforce minimum coverage thresholds per module and per test category.
Tasks:
- Define coverage gates for unit/integration/property/fuzz suites
- Apply separate thresholds for token, stream, governance modules
- Fail CI when thresholds regress and publish coverage artifacts
Acceptance Criteria:
Coverage gates are enforced in CI and module-level regressions are blocked.