fix(apps): restore Hello Workspace release compatibility

[Maneek21]

Summary

• accept public App Kit packages whose included Module manifests omit schema-defaulted fields
• preserve package artifact integrity and host-side Module semantic validation without comparing two different canonical forms
• add a cross-package regression test and prepare immutable v0.3.0-preview.14 release metadata

Release-gate finding

The v0.3.0-preview.13 operational gate built Hello Workspace successfully with the public CLI, but the release API rejected install because Module parsing adds required: false before the redundant digest comparison. The package verifier had already bound the exact artifact bytes to the manifest digest. The failed single-use pairing was consumed, and no App installation was persisted.

Verification

• red-before/green-after: pnpm exec tsx --test apps/api/test/apps-v0-inspection.test.ts (3/3)
• pnpm --filter @deft/app-kit test (8/8)
• pnpm test:release-workflow (10/10)
• pnpm test:hermes-integration-bundle (8/8)
• pnpm typecheck
• pnpm build
• git diff --check

Boundaries

• no migration or persisted-data change
• no permission, token, pairing, connector, App Run, or rollout-control change
• published v0.3.0-preview.13 remains immutable; this fix advances to preview.14