feat(wip): integrate scoped SDK and object-centered tools

Vendor the reproducible 1cbe03b4 Client/HTTP/Protocol/Text View snapshot with Cargo checksums and credential-free Nix dependency closure. Migrate native and compatibility publications to structured references and scope_ref, preserve target-first preconditions and frozen call descriptors, and expose Tree/Inspect/Invoke with complete edge coverage and official signatures.

Validation: worker 888 unit + 110 integration tests; pinned upstream Client63, HTTP39, Protocol23, TextView20 tests/doctests; root cargo check --locked --offline; format/diff checks; 43-file vendor checksum verification; nix build --no-link .#yoi.cargoDeps. Details and provider migration seams: docs/development/wip-integration-validation.md.

scripts/verify-wip-vendor.mjs

@@ -0,0 +1,19 @@
+#!/usr/bin/env node
+// Verify the unmodified Cargo-vendored WIP source snapshot, including its tests.
+import { readFileSync } from 'node:fs';
+import { createHash } from 'node:crypto';
+import { fileURLToPath } from 'node:url';
+import { dirname, resolve } from 'node:path';
+const root = resolve(dirname(fileURLToPath(import.meta.url)), '..');
+const packages = ['wip-client', 'wip-http', 'wip-protocol', 'wip-text-view'];
+let files = 0;
+for (const name of packages) {
+  const directory = resolve(root, 'vendor/wip-rs', name);
+  const checksum = JSON.parse(readFileSync(resolve(directory, '.cargo-checksum.json'), 'utf8'));
+  for (const [file, expected] of Object.entries(checksum.files)) {
+    const actual = createHash('sha256').update(readFileSync(resolve(directory, file))).digest('hex');
+    if (actual !== expected) throw new Error(`Changed upstream source: ${name}/${file}`);
+    files++;
+  }
+}
+console.log(`Verified ${files} files in ${packages.length} packages from wip-rs 1cbe03b49e48dd7e0be28b76fbc3c932f8920a36`);