[Rafa-Innerchispa]

Adds a structurally validated docker-build profile to the Local Execution Plane for owner-approved local container validation.

Safety boundary:

• permits only exact docker build -f <relative> -t <safe-ref> .
• permits bounded docker history, docker image inspect
• permits smoke container start only with --network none and a safe container name
• permits docker exec <name> python3 -c ... only inside that isolated container
• permits docker rm -f <safe-name> cleanup
• rejects host mounts, --privileged, host networking, registry push, path traversal and arbitrary Docker command shapes

Motivation: AMD AI League Match 4 local-first validation is already 63/63 PASS on AMD, but container build is blocked because the registry can select docker-build while the execution plane had no implementation for that profile.

Validation on AMD local execution plane:

• targeted Docker-profile regressions: 2/2 PASS
• compileall for both LEP implementations + tests: PASS
• git diff --check: PASS
• full LEP test file on feature branch: 17 PASS / 5 FAIL
• exact same full LEP test file on unmodified main: 15 PASS / same 5 FAIL
• therefore the 5 failures are pre-existing baseline fixture/runtime-profile failures, not introduced by this PR

Files changed:

• platform/inneros_core_runtime/local_execution_plane.py
• platform/raphiia_openai/local_execution_plane.py
• platform/tests/test_local_execution_plane.py

No product/customer runtime changes in this PR.