crossrealm_b package

TrySubOn attempts to mint a sub-realm token on a passed-in realm value. Non-crossing (`_ int` discriminator), so the caller's cur remains the topmost crossing cur — but borrow rule #1 runs this body with m.Realm = crossrealm_b, so rlm.Sub must reject: a foreign realm must not mint sub-identities in the caller's namespace.