Function check_citation_at_use 

pub fn check_citation_at_use(journal: &Journal) -> CheckResult

citation-at-use — §F3’s “never a bare uuid”, held where it actually matters: a frame rendered into a prompt must carry a non-empty citation label at that moment, not merely have carried one at the provider boundary.