Compiled, policy-gated operation executor for Reflection.

Runtime input can select only the definition Ref and snapshot time. Actor, purpose, stores, Activation and policy come exclusively from trusted host operation options under :reflection.