Treasury reallocation

Moves prototype credits between agent wallets. Each move passes the approval gate: above the operator threshold it waits for approval, and the kill switch blocks it. The debit goes through the normal wallet path, so the source's daily cap and circuit breaker apply.