Canonical ccf-core v1 trust-update and runtime-certificate primitives.
This crate exposes the filed-Prov6 vocabulary, QAC/min-gate/kappa/endpoint/ precheck/envelope/partition surfaces, and the story #148 scaffold report retained as a contract-baseline guard.