feat(tdx-hydro): add fail-closed basin adjudication

[CooperBigFoot]

Summary

• add deterministic, fail-closed local adjudication for the seven absent TDX-Hydro processing basins
• enforce the one-directional geometry-versus-transfer evidence boundary and acquired-source identity checks
• cover feature measurements, evidence refusals, exact-seven validation, and read-only operation with synthetic fixtures

Validation

• HFX_BINARY="$(pwd -P)/target/debug/hfx" uv run --project adapters/tdx-hydro python adapters/tdx-hydro/test_build_adapter.py
• cargo fmt --check
• cargo clippy --workspace --all-targets -- -D warnings
• cargo check --workspace --all-targets
• cargo test --workspace
• cargo build --workspace

Scope

• local and off-campaign; no cloud, NGA, or S3 access
• no evidence-tree mutation and no bulk data committed
• no adapter correction, compilation deliverable, assembly, version change, or release