Canonical capability data types, deduplicated into a zero-dependency leaf crate.
These pure-data types were historically defined in relon-eval-api
(CapabilityBit, NativeFnGate, Capabilities) and mirrored
field-for-field in relon-analyzer to avoid a dependency cycle (the
analyzer sits below the evaluator API in the dep graph, so it could
not reach back into it). Hosting them here lets both crates depend
on a single definition and re-export it at their historical public
paths, so every relon_eval_api::CapabilityBit /
relon_analyzer::cap::NativeFnGate reference keeps resolving while the
mirror is gone.
The enforcement machinery (CapabilityGate, GatedNativeFn,
NativeFnCaps) deliberately stays in relon-eval-api: it references
eval-api types and is not pure data. Only the bit/grant/requirement
data lives here.