feat: ship NDF as a Rust knowledge compiler

[zhoubot]

Summary

• replace the pre-release Python prototype with a standalone Rust 1.94.0 workspace
• preserve the frozen NDF identities, parsers, diagnostics, semantic hashes, SQLite rows, graph workflows, and JSON CLI contract
• add PTO-ASL, repository, evidence, dependency, ID allocation, and safe-fix support
• prove 100,000-node / 1,000,000-edge determinism and release performance
• update the Rust-only CI, migration guidance, bilingual contract check, and three-repository rollout plan

Verification

• cargo fmt --all -- --check
• cargo clippy --workspace --all-targets --all-features -- -D warnings
• cargo test --workspace --all-features --locked
• cargo build --workspace --release --locked
• scripts/ndf check --root tests/fixtures/markdown/project --format json
• NDF_RUN_SCALE_TESTS=1 cargo test -p ndf-compiler --test scale --release --locked
• scripts/check-release-performance
• git diff --check

Reference-machine scale result: two 1,000,000-edge builds in 1.474s and 1.469s, peak RSS 326,402,048 bytes, byte-identical 239,931,392-byte SQLite indexes.

Release note

Do not tag this feature-branch commit. After this PR merges, create annotated v0.1.0 on the exact merged commit, then advance PTO-SPEC and DavinciOO pins.