feat: add certified role refinement

[douglas-grishen]

Summary

• add a browser-safe Certified Role Refinement V1 reducer with structured patches, deterministic materialization, semantic validation, independent evaluation, exact selection, causal state and bounded evidence
• add a restart-safe Portable Agent orchestrator for governed publication, provisional activation, monitoring, certified predecessor restoration, quarantine and session handoff
• add a content-free collective certification adapter whose Trust filtering cannot reduce the Byzantine quorum below 2f+1
• add explicit, additive Runtime and Continuous Role Alignment restoration surfaces bound to the exact predecessor and certificate digest
• add public package subpaths, integration guidance, ADR, threat model, acceptance checklist and an executable healthy/rollback example

Safety and compatibility

• refinement can only preserve or narrow capabilities, resources, action budget and validity
• constraints cannot be removed; destructive edits require exact precondition digests
• exact instructions and definitions remain in local repositories and never enter collective agreement payloads
• selection, publication, activation and rollback IDs are sealed into the request digest
• expired publication authority fails before external effects; expired rollback authority requires a fresh, causally newer collective certificate
• partial publication, activation, rollback and quarantine recover idempotently after restart
• existing role update and Role Alignment control contracts remain forward-only and source-compatible; restoration is exposed through additive APIs

Validation

• pnpm run check
• pnpm run example:role-refinement
• public-surface audit: 2,328 files, no secret or restricted-terminology findings
• package smoke: 48 tarballs and 90 public API surfaces through clean pnpm and npm consumers