Harness Certification Matrix

Every advertised one-click harness target is certified executable every night — the generated config is run, not just checked for shape. Issue #7531.