fix(hex-primality): run deterministic verdict tiers before certificate fuel

[kim-em]

Closes #9781

Summary

• run size, complete table, and fixed Miller--Rabin verdict tiers before certificate construction fuel
• define fuel as constructed-node depth and preserve attempt/Rand accounting across deterministic tiers
• re-derive low-fuel primality and downstream integer-factor conformance cases, including focused zero/one-fuel API guards
• document the exact fixed-front-end/recursive-construction boundary in the HexPrimality SPEC

Public behavior

At explicit fuel zero, primeCert? can now return a small table certificate or a proved .composite verdict, and isPrime? can return false for composites decided by its fixed front end. Inputs that pass the fixed front end and require certificate construction still exhaust without consuming attempts or Rand state.

Verification

• lake build HexPrimality HexConformance
• lake build HexPrimality +HexPrimality.Conformance (after second-opinion documentation refinements)

Second opinion

Claude Opus found no soundness, termination, or accounting defect and independently reproduced the key low-fuel totals. Its SPEC wording concerns were addressed in f80d47f.