DocFence 0.43.0

Static package-signature coverage now enforces OPCs one-relationship-transform-per-relationships-part rule within each XML signature. Transform-bearing declarations for a relationship part are counted across every bound Manifest; duplicate transforms become aggregate unsupported references and do not credit coverage.

This remains a bounded static declaration audit, not XMLDSIG transform or digest execution, certificate validation, trust establishment, or Office client validation.