feat(console): record no-order risk profile preferences

[Pigbibi]

Summary

• add an admin-only, same-origin risk-profile binding endpoint and Admin controls for configured targets
• store only self-validating qsl.risk_profile_selection.v1 owner intent in a separate KV record
• keep the record fixed to no_order=true and execution_authority_granted=false; no runtime, dispatch, broker, or policy path reads it
• document the boundary and cover authorization, origin, target validation, and tamper rejection

Validation

• node --experimental-default-type=module tests/strategy_switch_worker_validation.mjs
• rtk pytest python/tests