T5 verify and output: model-free verification, docs diff, PR body

verify is a GUARDRAIL span that re-runs the patched runbook in a new container with stored commands only. A test bans model imports in verify.py. patch.diff and pr_body.md are written only for a verified docs patch.