📏 Limits & Exceptions Debug

Admin-only: see what the Decision Engine returns per HEA and set owner-level exceptions (unlocked / locked).