iter embedding-abi-m5.1 (DONE 3/3): lean ail-embed core + build.rs + hermetic smoke

M5 iteration 1 (spec ae905de, plan 22f02aa). Stands up the
workspace-excluded `ail-embed` crate:

- zero-dependency embedding core (`ail-embed/src/lib.rs`): extern "C"
  to the M3-frozen ABI + frozen-layout State/Tick box helpers + a
  Kernel price fold; the Rust port of the audited
  crates/ail/tests/embed/tick_roundtrip.c. Raw pointers never escape
  the type.
- build.rs (no in-repo precedent): AIL_BIN env override else nested
  `cargo build -p ail` against the parent workspace (separate target
  dir → no cargo-lock deadlock), `ail build --emit=staticlib`, link
  directives.
- hermetic data-server smoke (ail-embed/tests/smoke.rs): synthetic
  Pepperstone-format ZIP fixture via data-server's own public
  RawTickRecord type → real DataServer → Kernel, bit-exact vs a
  same-order host reference fold; runs with no /mnt.
- `ail-embed` is its own cargo workspace root (empty [workspace]
  table); data-server is a dev-dependency only. Root Cargo.toml gains
  only a 4-line non-membership comment.

Invariant 1 Boss-verified independently: full+no-deps cargo metadata
on the AILang workspace shows data-server count 0; git status path
filter empty (zero diff to crates/ailang-*, crates/ail/, runtime/,
examples/*.ail); src/lib.rs zero code-level data_server; AILang
cargo build --workspace still clean. ail-embed suite 2/2 green
(kernel_run_sums_prices unit RED-first + hermetic_smoke integration),
verified by me, not just the agent report.

Two toolchain-forced corrections to the plan's verbatim
ail-embed/Cargo.toml (added empty [workspace] table; sibling dev-dep
path ../libs -> ../../libs, manifest-relative) — confined to the
plan-created manifest, no acceptance gate altered, 0 review re-loops.
Journal Concerns records the planner-recon implication for the next
workspace-excluded-nested-crate plan. Adapter API + thread-swarm
deferred to M5 iter 2+ per spec/plan.

Includes the per-iter journal, stats, and the INDEX.md line.

ail-embed/Cargo.toml

@@ -0,0 +1,26 @@
+# Empty table: marks `ail-embed` as its own workspace root so the
+# physically-enclosing AILang workspace (../Cargo.toml) does not
+# auto-absorb this nested package. This is cargo's documented
+# mechanism for a deliberately workspace-excluded crate and keeps
+# `ail-embed` out of the AILang dependency graph entirely
+# (Invariant 1, docs/specs/2026-05-19-embedding-abi-m5.md).
+[workspace]
+
+[package]
+name = "ail-embed"
+version = "0.0.1"
+edition = "2021"
+license = "MIT"
+publish = false
+description = "Lean embedding of an AILang M3-frozen staticlib kernel into a Rust host. Not an AILang [workspace] member (Invariant 1)."
+
+# Iter m5.1: the library itself has ZERO dependencies — the embedding
+# core only touches the frozen C ABI. `data-server` is dev-only,
+# exercised solely by the hermetic smoke test, so Invariant 1 holds
+# in the dependency graph, not just on paper.
+[dependencies]
+
+[dev-dependencies]
+data-server = { path = "../../libs/data-server" }
+zip = "2"
+tempfile = "3"