Durable run output

Every run's stdout and stderr are written to disk under the data directory, byte-for-byte matching the hashes recorded in its execution record — so a stored run can be verified rather than trusted.

Run records live outside the sandbox directory and survive the sandbox that produced them.