privengine source realm

Package privengine is spike §5.5-5: the same honest engine, but deployed with `private = true`. gnomod docs say data whose type is defined in a private realm cannot be retained in other realms, so Register is expected to FAIL. If it succeeds, a private (re-deployable) adapter could swap the art of every collection that uses it, and core must refuse it explicitly.