slicc

docs+test: pin contracts for fetch bypass, SW URL wrap, WASM heap copy, require guards, and py-realm sync diff

feat(realm): hard-fail Node-native require() + timeout the pre-fetch