Authoritatively evaluate one local instrument before trade execution

Uses the caller tenant by default. A system-org service credential must send an explicit delegated policyContext and hold both trade and admin scopes. This endpoint never calls a provider.