Improve harness and reference submission

[andreea-alexandru]

• The MRPC pairs do not reach full 128 tokens; inject some examples which do,
• Mention leakage of the input prompt length to the server; is this acceptable?
• Think about adding another stringent quality measure (for all classification workloads): output probability agreement up to some tolerance between decrypted version and plaintext version.