Add repository reproducibility bundle guard

[Jorel97]

/claim #10

Summary

• Add a self-contained repository reproducibility bundle guard for SCIBASE Project Repository & Version Control.
• Validate release-candidate manifests for required scientific components, SHA-256 integrity, version-control status, runtime lockfiles, pinned runtime images, data/result provenance, release metadata, and export-bundle completeness.
• Include synthetic clean/risky scenarios plus reviewer artifacts in JSON, Markdown, SVG, GIF, and MP4 formats.

Distinct scope

This is not another branch-protection, semantic-tag, external-reference, notebook-output diff, fork provenance, release-signature, restore rehearsal, automation credential rotation, artifact pruning, Git LFS pointer, review-decision provenance, or release-note claim slice. It focuses only on whether a release packet is reproducible before publication/export.

Validation

• npm test
• npm run demo
• npm run demo:video

Demo video

• repository-reproducibility-bundle-guard/reports/demo.mp4