KVRM. KVRM: registry-constrained decision architecture for audited finite-action routing — fail-closed action selection with versioned registries, support validation, and deterministic audit trails