Export the managed TaskNotes type pack

[callumalpass]

What changed

• Exports TaskNotes as one canonical managed type pack rather than a caller-assembled install payload.
• Marks contract/schema/type resources with explicit ownership modes.
• Includes exact provided contract identity and digest semantics required by transactional evolution.
• Updates tests for the breaking prerelease pack shape.

Why

TaskNotes collections need a stable source of truth that the SDK can compare with portable lock provenance. Keeping the pack definition in the model package prevents the app, hosted provider, and local adapters from independently reconstructing contract state.

Impact

This is intentionally breaking prerelease model work and is designed for the new assess/apply APIs.

Depends on mdbase-spec#44 and mdbase-rs#39.

Validation

• 29 model tests
• package build
• package dry-run/smoke inspection