feat: online verification, node removals, and knowledge browser

Adds claim-bound online evidence records and citation verification scripts,
node removal transport/adapter, retrieval benchmark and owner-review tooling,
GraphCanvas/SourceDetail knowledge browser UI, and the ingest handoff helper.
Bumps the agents/gewu pack to the online-verification branch.

docs/GETTING_STARTED.md

@@ -68,6 +68,15 @@ make provision-credential ARGS="--credential-id local-agent-dome --principal-id
 
 Supply the printed token to your MCP host through its protected environment or credential store as `GEWU_TOKEN`. The service URL is `http://127.0.0.1:8000/mcp`. Do not reuse the browser viewer credential. The repository's `gewu-connector` is a selected-file upload bridge, not a general MCP client; see [the local agent specification](architecture/LOCAL_AGENT.md) and [agent pack guide](../agents/gewu/README.md) for its constraints and setup. Native discovery and workflows in Claude, Codex, Antigravity, and OpenCode remain unqualified, so treat any host connection as local experimentation.
 
+Give the agent the non-secret principal ID used when provisioning its credential (`local-agent` in the example), its project, selected connector file IDs and a turn budget. Diagnostics intentionally omits the principal ID. Generate a bounded handoff without reading credentials:
+
+```bash
+python scripts/prepare_ingest_handoff.py --principal-id local-agent \
+  --project-id dome-performance --file-id satie-2017 --max-tool-calls 35
+```
+
+The file ID must match the connector configuration. Repeat `--file-id` for evidence needed from multiple sources in one learning unit; add `--resume-run-id <existing-run-id>` when resuming. New source registration also requires an explicitly authorized shared-source grant. The helper does not provision credentials, confer grants or call the service.
+
 When testing contribution flows, use documents you have permission to process and preserve the exact source version and page/section locations. The fixture's automatic acceptance policy is deliberately test-only. Do not treat an accepted local record as an approved pilot decision.
 
 ## Run implementation checks