1f6b55a8e1
- ProjectProvenance namespace/dylib_sha256 widen to Option (Tier-1 additive serde): a data-only run stamps commit-only provenance; old string-field manifests keep parsing. - The load boundary tier-selects: a [nodes] pointer list in Aura.toml (one entry honored; MultiCrate / pointer-context refusals) loads the pointed-at crate; a root Cargo.toml stays the pre-#241 native project, unchanged; neither means data-only (std vocabulary, project-local runs/, both-tier provenance). - ProjectEnv splits into directory facts + Option<NativeEnv>; the crate pipeline (metadata -> artifact -> staleness -> ABI -> charter) relocates byte-identical into load_crate. - e2e fixtures: dataonly-project, multicrate-project, nested-nodes-project (a pointer crate resolves and stamps its namespace end to end). refs #241