feat(interface): add static Query and command artifact codec

[sanohiro]

Summary

Land the producer-independent L5a static Query/command artifact model and canonical v1 codec.

Changes

• add the public align_interface::static_artifact semantic model for Query and command envelopes;
• encode and decode canonical contracts, source identity, SQL occurrences, driver rewrites, bindings,
  checked metadata, and QueryMeta plans with checked lengths, tags, versions, and Hash128 identity;
• reconstruct and validate SQLite/PostgreSQL source-to-wire rewrites and correlate checked metadata
  with Params/Row contracts;
• add an independent reference encoder, corruption/semantic regression owners, and checked-in Query/
  command byte and digest goldens;
• record the L5a implementation closure matrix and review finding-to-fix ledger; constructor discovery,
  filesystem registration, and cache integration remain the next L5 checkpoint.

Review and verification

• host-native bounded review of the exact origin/main...HEAD candidate found six validation gaps;
  the follow-up fix commit closes all six at the same validation boundary;
• align-preflight:llvm22-rust196 Docker pre-PR passed the owner unit/integration tests, workspace
  build, selected workspace unit/integration tests, and workspace Clippy with -D warnings;
• the independent reference encoder and checked-in golden digests match the production codec;
• git diff --check and the Align self-review safety sweep pass.