governance: assign Docker lockfile to integration

[tom-sapletta-com]

Ticket: ticket-003

Declares uv.lock as an integration-owned dependency manifest before the portable lockfile and immutable Docker build are implemented.

Related: #10
Related: semcod/koru#64

[ifuri-validator-agent]

Deterministic Validator approval for exact head a604a49ca35d0b249dd641629ba61fbcb8011209.

Ticket: ticket-003
Correlation ID: testql-pr-11-ticket-003
Model: zai/glm-5.3
Reviewed diff chunks: 1
Advisory LLM verdict: APPROVE
Advisory summary: Reviewed all 1 diff chunk(s). Governance-only change declaring uv.lock as an integration-owned dependency manifest and fixing CI to install the declared nlp2env extra. No runtime code changes; ticket documentation is consistent and paths match intent. allowedPaths.
Advisory findings: none
The LLM output above is advisory and was not used as the approval trust root.
Merge will be attempted after this approval when explicitly authorized.

Decision record (recomputable)

DECISION D-003-0330
TICKET ticket-003
HEAD_SHA a604a49ca35d0b249dd641629ba61fbcb8011209
CORRELATION_ID testql-pr-11-ticket-003
ACTOR agent:ifuri-validator-agent[bot]
APPLIED_RULE P-CORE-015
INPUT author_login = "tom-sapletta-com"
INPUT observed_checks = ["test=PASS"]
INPUT required_checks = ["test"]
INPUT required_checks_source = "protected registry (env/request)"
INPUT reviewer_login = "ifuri-validator-agent[bot]"
INPUT superseded_checks = []
VERDICT APPROVE AUTHORITY DETERMINISTIC
REJECTED REQUEST_CHANGES BECAUSE NO_UNSAFE_CHANGE_REASON_FOUND
ADVISORY llm_verdict = "APPROVE" MODEL "zai/glm-5.3"
ASSERT VERDICT_AUTHORITY != "ADVISORY"