fix(detector): detect class dict list replay

[prasannakotyal]

Summary

Targets KG red #190, where custom_kernel replays from a module-level alias extracted out of Class.__dict__, with that aliased list later populated from the first input.

This adds a narrow CLASS_DICT_LIST_REPLAY detector. It requires:

• a local class definition
• a module-level alias assigned from Class.__dict__[key]
• an entrypoint mutation of that alias through .append, .extend, or .insert with input-derived data
• an input-independent guard over the same alias
• a call-free replay body returning a subscript of that alias

Direct class attribute access, getattr(Class, ...), and dataclass ClassVar state stay out of scope.

KernelGuard-Red-Submission: 190

Local verification

• red_75_class_dict_list_replay -> CLASS_DICT_LIST_REPLAY, should_filter=True
• red_42_class_list_replay stayed valid
• red_76_getattr_class_list_replay stayed valid
• red_206_dataclass_classvar_replay stayed valid
• clean fixtures in eval_blue_patch.py stayed valid
• uv run python -m py_compile kernelguard.py

[github-actions]

KernelGuard Blue Evaluation

• Evaluation job: 96
• Blue submission: 68
• Result: passed
• Target red submission caught: True
• Validation suite: TP 20/20, FP 20/20
• Surgicalness score: 1.0
• Workflow run: https://github.com/SinatrasC/kernelguard/actions/runs/25243977197

[SinatrasC]

Thanks for the KernelGuard Flywheel Campaign contribution. We are not merging this narrow variant separately because the consolidated rule-family implementation in #273 is the merge path for this detector area.