feat(agent): add online verification and governing-answer citations

Claim-bound online verification observations with URL provenance, exact
answer-basis references for citation-free governing-rule answers, and an
explicit operator identity handoff before source transfer. Bounds resumed
work by learning unit and refreshes pack manifest/contracts.

contracts/catalog-v1.json

@@ -235,6 +235,30 @@
         "http"
       ]
     },
+    {
+      "capability": "knowledge:read",
+      "mutates_knowledge": false,
+      "name": "node_removal_list",
+      "transports": [
+        "http"
+      ]
+    },
+    {
+      "capability": "knowledge:moderate",
+      "mutates_knowledge": false,
+      "name": "node_removal_request",
+      "transports": [
+        "http"
+      ]
+    },
+    {
+      "capability": "knowledge:moderate",
+      "mutates_knowledge": false,
+      "name": "node_removal_restore",
+      "transports": [
+        "http"
+      ]
+    },
     {
       "capability": "knowledge:read",
       "mutates_knowledge": false,
@@ -244,6 +268,22 @@
         "mcp"
       ]
     },
+    {
+      "capability": "knowledge:read",
+      "mutates_knowledge": false,
+      "name": "knowledge_browse",
+      "transports": [
+        "http"
+      ]
+    },
+    {
+      "capability": "knowledge:read",
+      "mutates_knowledge": false,
+      "name": "knowledge_graph",
+      "transports": [
+        "http"
+      ]
+    },
     {
       "capability": "knowledge:read",
       "mutates_knowledge": false,
@@ -296,6 +336,14 @@
         "http"
       ]
     },
+    {
+      "capability": "knowledge:read",
+      "mutates_knowledge": false,
+      "name": "get_source_nodes",
+      "transports": [
+        "http"
+      ]
+    },
     {
       "capability": "knowledge:read",
       "mutates_knowledge": false,