Qualify instruments by playing them, and add an omx-clap-host / plugin-hostd host profile #72

What is missing. Qualification never plays an instrument, and it has no host profile for omx-clap-host or plugin-hostd.

Why it matters. An instrument with no notes is silent and cheap: its real-time safety and its cost are only seen while voices play. A synth that allocates memory on note on would pass today. And a user of plugin-hostd gets verdicts measured against the console's profile (no instruments, six host extensions), not against the host they run.

Evidence (origin/main).

• native/clap-qualify.c builds only CLAP_EVENT_PARAM_VALUE events (line 342); no note event is ever sent. noteInputs is only counted (lines 441, 915-916).
• The LV2 measurer has no MIDI feed (git grep -n midi native/ finds none).
• HOST_PROFILES is [OPENMIXER_CONSOLE_PROFILE, JALV_PROFILE, MOD_HOST_PROFILE] (src/host-profiles.ts 117). omx-clap-host adds clap.preset-load, clap.track-info, clap.remote-controls and admits instruments (omx-clap-core src/effects.c 724-740), which no profile mirrors.

Where it plugs in. plugin-qualify: the native measurers (a note pattern during the RT and cost arms), a new profile, and the hosting codes.

Done when.

1. A fixture CLAP instrument that calls malloc on note on is marked not real-time safe; the same fixture without the malloc passes (sabotage pair).
2. The same for an LV2 instrument fixture fed MIDI through an atom port.
3. The cost arm reports the cost with a fixed chord held, at every declared rate.
4. A omx-clap-host profile exists, its extension list is tested equal to omx-clap-core's clap_host_extensions.h plus the three configured ones, and an instrument reads suitable under it and unsuitable under openmixer-console.