fix(detector): detect replay from mutated captured subscripts

[prasannakotyal]

KernelGuard-Red-Submission: 248

Adds a fourth LAST_CALL_REPLAY pass for state-only fast paths that return a subscripted value rooted on captured state mutated by the entrypoint.

The pass requires:

• the fast-path if-body to contain no real compute calls
• the guard to avoid input-parameter references
• the returned value to be a Subscript rooted on a mutated capture, directly or through a local loaded from that subscript
• the capture to be mutated by subscript/attribute assignment, AugAssign, global assignment, or a known mutating method call

Local validation:

• uv run python -m py_compile kernelguard.py
• uv run python /home/nino/repos/paradigma/kernelguard_bypasses/eval_blue_patch.py /home/nino/repos/paradigma/competition_state/kernelguard_mirror/kernelguard.py

Target red fixture: red_123_userdict_data_replay.py

[github-actions]

KernelGuard Blue Evaluation

• Evaluation job: 117
• Blue submission: 89
• Result: passed
• Target red submission caught: True
• Validation suite: TP 20/20, FP 20/20
• Surgicalness score: 1.0
• Workflow run: https://github.com/SinatrasC/kernelguard/actions/runs/25253812428

[SinatrasC]

Thanks for the KernelGuard Flywheel Campaign contribution. This PR is now superseded by the consolidated rule-family implementation in #273, which folds this detector coverage together with the related passing-eval variants.