Add strict host copy limits

[BlobMaster41]

Summary

• add strict-memory host copy guards for runner imports and common data slice writes
• add strict memory/table validation and gas accounting paths for metered execution
• extend tests around strict copy limits and metering behavior
• include the Cargo.lock transitive entry required by cargo test on current main

Verification

• cargo fmt --check
• cargo test