Layer 2 now runs via eval-judge agent using Max plan session auth instead of Agent SDK subprocess calls. No API key required. Also fixes composite scoring to exclude unmeasured dimensions.