v0.23.2

Patch release: the third and last of the shared-namespace collisions in the product→architect handoff, found by running the product pipeline through the full profile. All three plugins (product, architect, scalardb) move to 0.23.2 together.

Fixed

• NFR- IDs could be minted twice, by two skills, for different requirements. docs/design.md
  §1.5 told architect to create NFR- nodes for architect-originated NFRs without saying where the
  number comes from, which silently assumed product had already run define-nfr. It has not always:
  a product run that stops at --profile=mvp hands off to define-requirements, which finds no
  NFR- and mints NFR-001; resume the product pipeline afterwards and define-nfr mints
  NFR-001 too. An end-to-end run through the full profile produced exactly this — six IDs, each
  with two meanings, in the single graph both plugins share. §1.5 gained rule 4: allocate every new
  ID as max over the graph for that prefix + 1, the same rule OQ- follows. The §1.5
  verification list now includes "no ID appearing twice", so review-consistency and
  /product:review catch a recurrence instead of leaving it to a later reader.