Pre-flight check: walk the graph and verify every stage’s declared capabilities
are within the granted policy. Returns an empty vec when all capabilities pass.
Pre-flight check: walk the graph and verify every stage’s declared effects
are within the granted policy. Returns an empty vec when all effects are allowed.
Walk the composition graph and return the union of all effects declared by
every stage. RemoteStage nodes always contribute Effect::Network.
Stages not found in the store contribute Effect::Unknown.