Moves the hook export byte-probe logic for AMSI and ETW, the periodic
integrity check loop, and the tamper-event publish path out of runtime.cpp
into runtime_integrity.cpp. The watchdog ticks every 2 seconds and republishes
state every 10 seconds independent of whether the tamper state changed.