feat: index PTO ASL unit and state graphs

[zhoubot]

Summary

• index PTO-UNIT and instruction unit provenance as typed source nodes, including the exact generated:decoders synthetic dependency
• index exact PTO-STATE records as architecture nodes with unit ownership, member, dependency, duplicate, and cycle validation
• add ndf query attribute filtering and state-aware PTO release impact classification
• document the authored contract in English, Chinese, and the PTO ASL adapter guide

Architecture authority

PTO-SPEC ASL remains the sole authority for instruction behavior and architecture-state transitions. This PR adds derived identity, provenance, validation, query, and impact metadata only. It does not change executable ASL semantics, encodings, legality, faults, completion, ordering, or profiles.

Design: PTO ASL state graph design

Stable surfaces

• entities: unit, synthetic-unit, state, instruction, and existing NDF clauses
• diagnostics: NDF-ASL-006 through NDF-ASL-009
• query: kind=architecture and attributes.pto_entity=state
• impact: state semantic changes are breaking; owner moves and additive state-closure references require review; closure reference removal is breaking

Verification

• cargo fmt --all -- --check
• cargo clippy --workspace --all-targets --all-features -- -D warnings
• cargo test --workspace --all-features --locked — 0 failures
• cargo build --workspace --release --locked
• scripts/ndf check --root tests/fixtures/cli-smoke/project --format json — ok:true
• NDF_RUN_SCALE_TESTS=1 cargo test -p ndf-compiler --test scale --release --locked -- --nocapture — 17.04s
• scripts/check-release-performance — passed, peak RSS 361349120 bytes
• git diff --check

Rollout

PTO-SPEC must pin the eventual merged 40-character commit from this PR before publishing the complete state catalog. DavinciOO must consume only the merged NDF and PTO-SPEC commits.