feat(#1430): versioned capability manifest + native stamping (ADR-1244 Phase 1) (#1436)

* feat(#1430): versioned capability manifest + native stamping (ADR-1244 Phase 1)

Make the capability manifest versioned — the data substrate the Capability
Ecosystem (ADR-1244) keys off:

- capability.json gains a REQUIRED semver `version` plus the optional
  ecosystem envelope (`engines.gsd`, `compatVersions`, `integrity`,
  `provenance`); the build-time conformance validator enforces them via a new
  `validateVersionEnvelope()` (exported for the Phase 2 runtime overlay).
- All 32 native capabilities stamped with `version` (= package version,
  lockstep) + `engines.gsd`; `sync-manifest-versions.cjs` gains a glob sweep
  that keeps them in sync, and the issue-844 regression guard is extended.
- Strict SemVer 2.0.0 grammar blocks metacharacter/space/unicode smuggling in
  version strings; range/integrity fields are shape-validated (satisfaction
  and the load-time gate are deferred to Phase 2/4).
- Capability rel-paths emitted forward-slash for cross-platform git correctness.

Closes #1430

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

* docs(#1430): add changeset for versioned capability manifest

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

---------

Co-authored-by: Claude Opus 4.8 <noreply@anthropic.com>

capabilities/security/capability.json

@@ -1,13 +1,26 @@
 {
   "id": "security",
   "role": "feature",
+  "version": "1.5.1-dev.0",
   "title": "Security enforcement",
   "description": "Threat mitigation verification and ship-time security blocking for phases with security enforcement enabled.",
   "tier": "full",
   "requires": [],
-  "runtimeCompat": { "supported": ["*"], "unsupported": [] },
-  "skills": ["secure-phase"],
-  "agents": ["gsd-security-auditor"],
+  "engines": {
+    "gsd": ">=1.6.0"
+  },
+  "runtimeCompat": {
+    "supported": [
+      "*"
+    ],
+    "unsupported": []
+  },
+  "skills": [
+    "secure-phase"
+  ],
+  "agents": [
+    "gsd-security-auditor"
+  ],
   "hooks": [],
   "config": {
     "workflow.security_enforcement": {
@@ -22,7 +35,13 @@
     },
     "workflow.security_block_on": {
       "type": "enum",
-      "values": ["critical", "high", "medium", "low", "none"],
+      "values": [
+        "critical",
+        "high",
+        "medium",
+        "low",
+        "none"
+      ],
       "default": "high",
       "description": "Minimum open threat severity that blocks advancement."
     }
@@ -30,9 +49,15 @@
   "steps": [
     {
       "point": "verify:post",
-      "ref": { "skill": "secure-phase" },
-      "produces": ["SECURITY.md"],
-      "consumes": ["SUMMARY.md"],
+      "ref": {
+        "skill": "secure-phase"
+      },
+      "produces": [
+        "SECURITY.md"
+      ],
+      "consumes": [
+        "SUMMARY.md"
+      ],
       "when": "workflow.security_enforcement",
       "onError": "halt"
     }
@@ -49,7 +74,9 @@
         "security_block_on": "workflow.security_block_on"
       },
       "produces": [],
-      "consumes": ["CONTEXT.md"],
+      "consumes": [
+        "CONTEXT.md"
+      ],
       "when": "workflow.security_enforcement"
     }
   ],