Proof bundle for TDLN: binds AST and canonical bytes with deterministic rule set. Optional signatures (Ed25519 / DV25) can be attached via features.