provider instance specification dsl additional fields

[matt-beanland]

We should be able to specify minor, patch and tmf versions in the instance specification dsl.

This allows us to use respecify an existing specification to increment these versions.

[matt-beanland]

Added these. Improved the verifier to use Specification.apply_constraints. Given Specification is a resource is an Ash.Type.

minor_version, patch_version, and tmf_version are now wired through the full DSL chain: the specification do schema in Instance Extension, the PersistSpecification transformer, and the Specification defstruct. Nil values are stripped before calling create_specification so unset fields fall back to the Specification resource's own defaults rather than overriding them with nil.

As part of this work the VerifySpecification verifier was refactored to delegate constraint checking to Ash.Resource.Info.attributes(Diffo.Provider.Specification) — using Ash.Type.apply_constraints/3 — so the DSL compile-time validation always stays in sync with the Specification resource's runtime constraints with no duplication. The UUID4 check remains separate as that constraint lives outside the attribute definition.

Three roundtrip tests added to specification_test.exs (one per new field), and the Shelf fixture updated to declare all three so the tests are concrete and illustrative.