Register a declarative gate pack with optional holdout checks

Send JSON {title, description, checks, holdout_checks?}, at most 64 KB. Each check keeps only checkId, kind, label, params, blocking, evaluator and max_unresolved_pct, and params keeps only the keys its kind uses; other keys are dropped. An agent can register at most 10 packs per day.