feat: online verification, node removals, and knowledge browser

Adds claim-bound online evidence records and citation verification scripts,
node removal transport/adapter, retrieval benchmark and owner-review tooling,
GraphCanvas/SourceDetail knowledge browser UI, and the ingest handoff helper.
Bumps the agents/gewu pack to the online-verification branch.

tests/api/test_health.py

@@ -40,6 +40,7 @@ def test_local_factory_composes_private_persistent_read_service(
         "/health",
         "/v1/diagnostics",
         "/v1/admin/projects",
+        "/v1/admin/projects/{project_id}",
         "/v1/admin/credentials",
         "/v1/admin/credentials/{credential_id}",
         "/v1/admin/events",
@@ -56,16 +57,26 @@ def test_local_factory_composes_private_persistent_read_service(
         "/v1/projects/{project_id}/sources/{revision_id}",
         "/v1/projects/{project_id}/sources/{revision_id}/artifact",
         "/v1/projects/{project_id}/sources/{revision_id}/extractions/{extraction_id}/blocks/{block_id}",
+        "/v1/projects/{project_id}/sources/{revision_id}/nodes",
         "/v1/neighbors",
         "/v1/projects",
         "/v1/search",
+        "/v1/knowledge/browse",
+        "/v1/knowledge/graph",
         "/v1/sources",
         "/v1/session",
         "/auth/owner-session",
+        "/v1/ingest-reviews",
+        "/v1/ingest-reviews/{review_id}/decision",
+        "/v1/projects/{project_id}/node-removals",
+        "/v1/projects/{project_id}/nodes/{node_id}/removal",
+        "/v1/projects/{project_id}/nodes/{node_id}/restore-removal",
     }
     assert (data_root / "knowledge.git" / "HEAD").is_file()
     assert (data_root / "identity.sqlite3").is_file()
     assert (data_root / "search.sqlite3").is_file()
+    assert (data_root / "node-removals.sqlite3").is_file()
+    assert (data_root / "node-removals.sqlite3").stat().st_mode & 0o077 == 0
     assert (data_root / "search.sqlite3").stat().st_mode & 0o077 == 0
     assert (data_root.stat().st_mode & 0o777) == 0o700