feat(driver): register deterministic static inputs

[sanohiro]

Summary

• Add the driver-side L5b static input resolver for sibling or explicit SQL files and decoded inline SQL.
• Add bounded canonical checked-metadata snapshot/revalidation, exact per-driver manifest dependencies, and fail-closed manifest/action-key encoding.
• Include static-input identity in the existing codegen implementation key and re-export the public driver types needed by the resolver.

Review closure

The host-native review was run against the exact final candidate lineage. Findings were closed in coherent fixes covering permitted-driver metadata coverage, symlink containment, complete nested metadata validation, bounded file and inline reads, canonical escape forms, NUL-bearing identities, duplicate descriptor IDs, and lexical defining-module path resolution.

Constructor recognition and descriptor placement remain deferred to the next L5 capability; this PR consumes already-resolved descriptor identities only.

Verification

• scripts/cargo.sh check -p align_driver --lib
• scripts/cargo.sh clippy -p align_driver --lib -- -D warnings
• Docker owner: scripts/cargo.sh test -p align_driver --lib static_inputs (17 passed)
• Docker owner: scripts/cargo.sh test -p align_driver --test cache_codegen json_scan_copy_row_codegen_key_identity_owner (1 passed)
• Docker scripts/pre-pr.sh with host-native review and --findings-fixed attestation