Introduce repository-backed capability workspaces

- define and validate the capability and resource-lock languages
- provision workspace source repositories through Central Gitea
- build package runtimes from pinned standalone sources
- replace legacy schema compilation with workspace persistence plans
- add stable optimistic registers and Automerge CRDT documents
- modernize TypeScript/Nix package builds and runtime activation readiness

proto/quixos/refs.proto

@@ -2,10 +2,27 @@ syntax = "proto3";
 
 package quixos;
 
-message FunctionRef {
-  string package_namespace = 1;
-  string package_name = 2;
-  string symbol = 3;
-  string version_ref = 4;
-  string operation = 5;
+message CapabilityRef {
+  string interface_revision_id = 1;
+  string operation_id = 2;
+}
+
+message PackageExportRef {
+  string package_revision_id = 1;
+  string export_id = 2;
+}
+
+message InjectedDependency {
+  string port_id = 1;
+  oneof binding {
+    string state_slot_id = 2;
+    EdgeDependency edge = 3;
+    string receiver_interface_revision_id = 4;
+    string constructor_atom_id = 5;
+  }
+}
+
+message EdgeDependency {
+  string edge_type_id = 1;
+  string projection_id = 2;
 }