§H.12 step 20: CH-REQUEST initiator-only gate (MY-CH-ID)

Added VARIABLE MY-CH-ID to messaging.4th (fail-closed -1 default) and
set it per-VM in hermes/init.4th and artemis/init.4th. CH-REQUEST now
refuses if the caller-supplied 'from' doesn't match the calling VM's
own id, closing a real spoofing gap found while implementing this.

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01QgooKd5hJNtTYqB6CyK5f9

capsules/hermes/init.4th

@@ -15,6 +15,7 @@ Block 5116
 ( VM that doesn't exist yet at Hera's own birth. )
 S" common:messaging.4th" EXEC
 MSG-CD-INIT
+1 MY-CH-ID !
 S" lib.4th" EXEC
 1 COMMON-CH @ CH-ADD-MBR
 0 COMMON-CH @ CH-ADD-MBR