Second per-consumer step of stage 2b. m_ld becomes a read-ahead pointer; both poly_mul load reads (bank_a A_hat, bank_se s_hat) are registered into pm_a_rd/pm_b_rd and fed one cycle later (pm_valid delayed 1 cyc), same pattern as ST_N. 11/11 KAT PASS, byte-exact.