[connectingdevops-droid]

Summary

• Assert the winner's token balance reflects the stake and claimed payout.
• Reject non-admin signers for oracle registry additions and removals.
• Default the shared oracle confidence threshold to 5000 bps (50%).
• Reject analytics timestamps more than one day from ledger time, in either direction.

Closes #201
Closes #204
Closes #210
Closes #208

Validation: tests and compilation were intentionally not run per request. Editor diagnostics and git diff --check reported no issues.