fix(verifier): check Odoo record existence for anchored soft claims (#129 golden flake)

[Weegy]

Problem

golden-eval.yml flaked on blocked_deterministic_id_absent — 2 of 15 main runs today (12:39, 13:55), always via=deterministic-contradicted(MISS) with samples like [approved_with_disclaimer, approved_with_disclaimer, blocked].

Reproduced locally (16 runs, 6 misses). In the miss samples the Haiku extractor returns the claim with odoo_record: {model: "account.move", ref: "INV/2026/0099"} but typed qualitative instead of id. qualitative claims never reach DeterministicChecker; the judge says unverified → approved_with_disclaimer.

This is a real gap, not eval noise: a hallucinated invoice number passes with a disclaimer in roughly a third of turns.

Fix (two layers)

1. Pipeline — hasOdooRecordAnchor() + DeterministicChecker.checkRecordExists(): soft claims anchored on an Odoo record get an existence re-query before the judge (read by id / search by name = ref, same transport as the id path). Non-existent record ⇒ contradicted ⇒ blocked, judge never asked. Existing / unverifiable ⇒ judge as before.
2. Extractor prompt — a record reference is always its own id claim in addition to any qualitative claim about the same record.

Verification

Check	Result
New unit tests (checker ×4, pipeline ×3)	red → green
npm test (middleware)	7165 tests, 0 fail
npm run typecheck / typecheck:test	clean / ratchet 406 = baseline
npm run eval:golden locally	15/15 PASS, all first-sample
Flaky case ×12 against claude-haiku-4-5	12/12 blocked (before: 10/16), both claim types contradicted

Closes the flake behind #129; no corpus or maxRuns changes — the fix is in the checker, not the eval.

Review round (omadia-reviewer) → fbf7aad5

Finding	Resolution
HIGH name claims anchored → exact name = "John Doe" could block correct answers	Anchor is qualitative only; ref must look like a document sequence (contains a digit)
HIGH ref searched on name only (vendor bill ref, SO client_order_ref, …)	SOFT_ANCHOR_REF_FIELDS per-model field list + allow-list; unknown model ⇒ unverified (judge)
MEDIUM double contradiction when hard id twin + qualitative twin share an anchor	Dedupe by anchor key; hard path owns the record verdict
MEDIUM replay-guard asymmetry on soft path	Covered by the hard twin; documented in checkSoftClaims
LOW misleading reason string, test gaps, missing CHANGELOG	Fixed; +5 tests (fail-open, twin dedupe, name exclusion, field fallback, allow-list, predicate edges); docs/CHANGELOG.md entry

Post-review: verifier tests 55/55 · suite 7217/0 fail · golden 15/15 · flaky case 10/10 blocked, exactly one contradiction each.