[bug] Judge action=block ignored when score is low #86

Problem

When a judge returns action=block with a low score, the pipeline can still allow the request because action is not forced from the judge decision (score-driven path wins).

Expected / acceptance criteria

• Judge BLOCK forces block or clamps score high enough that block thresholds apply
• Regression: low-score judge block cannot result in ALLOW