Authoritatively evaluate one local instrument before trade execution

Uses the caller tenant by default. A system-org service credential must send an explicit delegated policyContext and hold both trade and admin scopes. Known instruments are evaluated from PostgreSQL only; a missing numeric Polymarket token may run one bounded, single-flight official catalog hydration before the local decision is retried.