Function validate_split_expr_shape 

fn validate_split_expr_shape(expr: &PartitionExpr) -> bool

Validates that split_expr is a single atomic range predicate.

This restriction keeps NOT(split_expr) in the same range-only subset so the resulting left/right branches stay within the supported contract.