fix: make restore manifests portable across Postgres builds

[0xprogrammable]

Summary

• preserve the raw structural manifest while adding a portable cross-build manifest
• normalize only PostgreSQL-proven default ACL equivalence and redundant same-boolean grouping in CHECK/view definitions
• bind safety backup, pinned restore, rollback, and result evidence to the portable manifest

Verification

• live Candidate versus isolated restore: data, counts, and portable structural hash exact
• pinned pre-attestation dump restored independently: portable pin reproduced
• targeted restore tests: 38/38
• PGlite database tests: 31/31
• Vitest: 1781 passed, 7 skipped
• full npm run verify passed (contracts, ESLint, typecheck, smoke/ops gates, build)