vanta-config — load, validate, and merge Vanta manifests.
Parses vanta.toml/config.toml into the typed [model::Manifest], reports
span-accurate VTA-CFG-* diagnostics on failure, and implements the
precedence merge (global < project). See docs/05-configuration.md.