feat: add assessment-bound Crucible replay

[HarperZ9]

Summary

• emit declarative mneme.recheck/1 descriptors in schema-v2 Crucible exports
• consume assessment-bound crucible.replay-template/1 and produce crucible.replay-pack/1
• verify compact crucible.replay-set/1 bindings without disclosing descriptorless rows
• make replay state access read-only and snapshot-consistent
• harden provenance parsing, raw-row drift detection, incompatible schemas, duplicate JSON keys, and atomic no-overwrite pack publication
• use Windows no-replace rename without requiring hard-link support; preserve POSIX exclusive publication
• align Mneme's Plexus interop ports with the Crucible replay contract

Verification

• focused replay/compose/drift: 79 passed
• full suite: 180 passed
• package build: passed
• example tour: passed
• independent final review: PASS
• real preserved QCR replay at exact Mneme commit d4239da
  • baseline: 5 checked; 0 skipped/missing/mismatched/failed
  • negative control: 5 checked; exactly 1 mismatch; Crucible exit 1
  • preserved source DB unchanged
  • read-only replay copy unchanged
  • final artifact ledger SHA-256: 446f973956f7c113f9abde665d0975796e639899600c24d7e189225b34811fcd

Related contracts: HarperZ9/crucible#12, HarperZ9/plexus#2, HarperZ9/local-model#5.