940db565b3
- add the missing rule-8 counterexample test: declared capabilities exceeding the adapter protocol are rejected with CAPABILITY_UNSUPPORTED_BY_ADAPTER (all eight section 9.2 checks now have at least one negative test) - raise CREDENTIAL_NOT_CONFIGURED explicitly in _check_enabled_model when a required credential reference is null instead of relying on resolve_parameters call ordering