Add knowledge graph software compatibility guard

[haki203]

Summary

• add a self-contained software/runtime version compatibility graph guard for Scientific Knowledge Graph Integration
• validate package/runtime semver ranges, immutable container digests, workflow engine ranges, lockfile provenance, and runtime capture freshness before recommendations are shown
• suppress unsafe graph paths, keep reviewable compatible paths visible, and emit curator actions plus entity-page packets
• include deterministic JSON, Markdown, SVG, and H.264 MP4 demo artifacts from synthetic data only

Safety

• no package registry, container registry, dataset, credential, external API, or network calls
• synthetic fixtures only in knowledge-graph-software-version-compatibility-guard/sample-data.js

Proof

• knowledge-graph-software-version-compatibility-guard/reports/demo.mp4

Validation

• node --test knowledge-graph-software-version-compatibility-guard/test.js -> 3 tests passed
• node --check knowledge-graph-software-version-compatibility-guard/index.js
• node --check knowledge-graph-software-version-compatibility-guard/test.js
• node --check knowledge-graph-software-version-compatibility-guard/sample-data.js
• node --check knowledge-graph-software-version-compatibility-guard/demo.js
• FFMPEG_PATH=... node knowledge-graph-software-version-compatibility-guard/demo.js -> 3 scenarios, 1 suppressed, 1 curator review, 1 visible
• ffmpeg -v error -i knowledge-graph-software-version-compatibility-guard/reports/demo.mp4 -f null NUL
• git diff --cached --check

/claim #17