Probabilistic FFS — P(PASS), not just PASS

Standard FFS ships a binary verdict and silently swallows input uncertainty. We propagate posterior CI through the FFS calc and return P(PASS) with the dominant uncertainty contributor flagged — so inspection planning can target the variable that actually moves the verdict.