Add hash-addressed delivery change receipts

[JSv4]

Summary

• add deterministic, hash-addressed delivery change receipts over source and delivered package identities
• retain normalized transaction, attribution, authored-change, lineage, privacy-profile, PageMap, artifact, and tamper-verification evidence
• consume [Verify] Expand semantic diff beyond block text and kind #457 canonical semantic evidence, [Verify] Add a comprehensive deliverable validator #463 shared package deltas and deliverable reports, and [Verify] Prove generated redline accept/reject reversibility #464 canonical reversibility proofs
• enforce bounded parsing/serialization and portable artifact paths with fail-closed schema, lineage, digest, and resource validation
• distinguish exact idempotent retries from conflicting results while preserving distinct identified and anonymous no-op transactions

Stack

This draft is based on agent/issue-464-redline-proof (PR #495), exact head f0b08d0b, which is green and includes the corrected #493 foundation through PRs #494 and #496.

Verification

• 179 passed / 0 failed / 0 skipped in the final Release dependency-stack run
• 34 passed / 0 failed / 0 skipped in the focused delivery-receipt run
• git diff --check passes
• complete post-[Verify] Prove generated redline accept/reject reversibility #464 patch reverse-applies cleanly at exact head 608d5b1c
• independent post-restack review approved with no remaining blocker, high, or medium findings
• review fixes cover shared target-aware package ordering, exact retry evidence, distinct no-op identities, duplicate revision IDs across parts, and real [Verify] Add a comprehensive deliverable validator #463/[Verify] Prove generated redline accept/reject reversibility #464 canonical artifacts

Viewable local evidence is retained at /tmp/docxodus-458-artifacts/index.html, including the complete patch, final TRXs, SHA-256 checksums, the pre-review green snapshot, and the useful review-remediation failure.

Closes #458