Risk state

Read-only view of kill switch, daily PnL, drawdown, breaker status and capital withdrawal history. No control actions, no keys.