Testing documentation

Test taxonomy, testkit guide, and reproduction how-tos (PRD 12).

• Testkit — seeded generators, oracles, drift alarm (M2).
• Differential fuzzing — per-family libFuzzer targets, corpus policy, reproduction (M4).

Owner: MOD-TESTKIT.