000b84dda7
Adds BareCrossModuleTypeRef / BadCrossModuleTypeRef / QualifiedClassName to WorkspaceLoadError plus the validate_canonical_type_names function that enforces the canonical-form rule on every Type::Con name reachable from any def (including Term::Lam.param_tys / .ret_ty and Term::LetRec.ty). Term::Ctor.type_name and class-name fields land in Tasks 2 + 3; the validator is not yet wired into load_workspace (Task 6). Seven RED-first unit tests cover the cases enumerated in spec section Testing strategy plus a Lam-embedded-type smuggle-prevention test. main.rs gains diagnostic arms for the three new variants to keep the exhaustive match compiling.