REMEDiS test-dev

This is the REMEDiS test-dev / PSIRTling first slice.

VDP report → case → propose/confirm → unpublished draft.

Existing /v1/* API is unchanged. No 1.0 restore, no publish, no SBOM/Jira/TI.