Align CORPIFORM runtime denial entrypoint with canonical refusal flow

[midiakiasat]

Included surface

• runtime/runner/run.sh

Result

• installs the canonical denial emission hook at runtime entry
• makes dead and frozen refusals pass through the declared denial surface
• restores refusal-path continuity between runtime gating and denial ledger emission

Boundary

This change updates runtime refusal entry behavior only. It does not alter authority semantics, execution body policy, trusted roots, or release posture.