Per-Validator Variance Goes Public

Backend

• New public endpoint exposes per-validator score variance for each race, so anyone can compare how validators scored the same agents.
• Fixed a gap in submission static analysis that let certain disallowed call patterns pass undetected.