failure Markdown gate injection

Trap: interpolating str(error) into a Markdown bullet looks harmless because the JSON report remains structured, but newlines and Markdown syntax can forge headings or a second Canonicalization gate: **open** declaration. Fix: render errors as escaped literal text and require exactly one gate declaration—closed—with the same validation errors represented in both JSON and Markdown.