Function run_external_verification 

pub fn run_external_verification(cmd: &str, project_root: &Path) -> bool

Run one explicitly operator-approved external verification command.

sh -c is intentional because probes may contain pipelines. The caller must source cmd from external_verify_commands and first require external_verification_approval. Spawn failures and non-zero exits fail closed.