feat: add package-defined native resources

[sanohiro]

Summary

• add package-defined opaque native resources with producer-owned Drop thunks and pointer ABI
• enforce construction privilege, exact Move/Drop cleanup, resource-reference generations, dependent-resource provenance, and checked native views
• serialize and validate nominal resource identity for whole-program and per-unit compilation
• close resource tuple ownership/provenance and declaration-order-independent generic mangling found during review

Verification

• scripts/pre-pr.sh --base origin/main --reviewer codex-host --review-log ... --findings-fixed --owner-test resource-ownership -- scripts/cargo.sh test -p align_driver --test resource_ownership
• resource ownership owner suite: 19 passed
• pre-PR workspace library tests and Clippy: passed

Review

The host-native full-diff review plus its scoped continuation found two P2 issues: local-id-based resource generic mangling and missing tuple producer/HIR-boundary closure. Both were fixed in e3d670d7, with dedicated nominal-identity and whole/per-unit runtime regressions.