pub fn validate_knowledge_envelope(value: &Value) -> Result<Envelope<Value>>
Validate structure, strict I-JSON, Identity hash/signature, URLs, canonical IDs and profile binding uniqueness. Dependencies are checked separately.