feat(op): the graph document carries its catalog — mandatory even empty, refused when absent - #593

…pty, refused when absent

Phase 1 of the resource-construction plan (4-resource-management.md section 5.4). The graph document gains a
mandatory resources section: every current-generation ledger entry as intent -- id, uri, state pending, in
append order, via the catalog's new IntentEntries -- with content-addressed entries additionally carrying
their packed bytes as before. The section serializes even when empty and sits outside the canonical bytes,
like the content section.

LoadGraph refuses a document without the section: every pre-ruling document fails to load and is rewritten by
re-planning, with schema_version staying 1 by ruling. unpackCatalog replaces unpackContent as the load-side
dual: every row restores as a Pending entry with its recorded id (the trace-rehydrate discipline -- interning
disabled, constructors rebuild from the URI's specific, unpackers consume matching content blobs), an orphan
content blob is an error, and nextID re-derives from the recorded ids. The executor backstops the same rule:
a catalog-less graph fails pre-flight with preflight_failed before any dispatch, in Run and ResumeUnwind
both.

ResourceState learns to serialize as its name -- a document carries "pending", never a bare ordinal -- the
same typed-value rule the mode-as-384 rendering violated.

Both judgment pins land green with this change, earlier than planned: the plan expected them to flip with
phase 3, but planning already interns the resource-typed source, so serialization was the missing half and
the destination's absence -- a product is a runtime fact, not intent -- was already true. The pins now assert
the ruled contract in both directions: source present as pending, destination absent, from Go
(catalog_contract_test.go) and front to back through devlore-test (test_graph_catalog_contract.star, six
expectations, passing). Four new section-5.4 pins cover the empty-section round trip byte-identically, the
missing-section refusal, id-preserving intent-row reconstruction, and the executor backstop.

Verified with make check (103 packages ok, 0 failures -- the tree is fully green, pins included) and make vet
under GOOS windows and linux.

Closes #583. Refs #581, #444.