Function reset_thread_state 

pub fn reset_thread_state()

Drop all per-thread security state (policy stack + MCP schema pins). Called by reset_thread_local_state so test runs sharing a thread cannot leak overrides or pins into each other.