feat(lab9): falco custom rules + conftest policy

[rmcavalcante7]

Goal

Complete Lab 9 runtime detection and policy-as-code submission.

Changes

• Added Falco custom runtime rules for /tmp writes and likely cryptominer activity.
• Added the Lab 9 submission report with Falco alert evidence, Conftest policy results, and bonus analysis.
• Documented the extra Conftest policy behavior for a deny rule and a warn rule.

Testing

pre-commit hooks during commit: passed
Lab 9 report validation: JSON alert blocks parse successfully; no broken Markdown code fences

Artifacts & Screenshots

• submissions/lab9.md
• labs/lab9/falco/rules/custom-rules.yaml
• labs/lab9/policies/extra/hardening.rego

Checklist

• The title follows feat(lab9): <topic>.
• No secrets or large temporary files are committed.
• submissions/lab9.md exists.