Adopts xceval 0.4.x: typed imports for report documents with their full normalized sample rows, plus canonical artifactID and exact-source byteDigest provenance on inspect and report imports. This is a minor rather than a patch release because 0.2.x required xceval 0.3.x and 0.3.0 requires 0.4.x — the ranges are disjoint, so consumers pinning xceval directly must move with it. See CHANGELOG.md for migration notes.