Ports of the cics-crucible programs (https://github.com/squid-protocol/cics-crucible, Apache-2.0,
pinned in tests/_cics_crucible_pin.py), #3989.

Each <case>/<PROGRAM>/overlay/service/<Service>.java is a Java port of that case's src/<PROGRAM>.cbl,
written by a model through GitGalaxy's porting loop (gitgalaxy/tools/cobol_to_java/port_runner.py) and
committed exactly as the model returned it: no hand edits. Its provenance.json names the model, the
backend command, the attempt that was proven, the SHA-256 of the porting ticket it was made from, the
model's notes, every attempt and proof of that program, and the proof itself (tests/tools/cics_crucible.py:
every scenario that runs the program matches the crucible's hand-written expected log exactly).

"approved": false -- a proof is not a review. The porting loop records a person's decision separately
(port_runner review); none has been made for these ports.

tests/tools/cics_crucible.py's java-ported side lays these overlays over the freshly generated services
and re-proves them on every change (tests/cics_crucible/baseline.json holds the ratchet).
