docs(track-a): make Package D input lock normative

[blakinio]

Scope

Package D Task 6 governance checkpoint.

• make canonical input.lock mandatory for canonical GUI/input mutation under the existing Track A supervisor;
• clarify that input.lock serializes input only and grants no lease/registration/Gate/mutation/login/session authority;
• bind the Official adapter contract to Track A guarded-dispatch + input.lock while keeping process execution external to Control Center;
• record Package D semantic bridge PR feat(control-center): bridge Official adapter to Track A guard #676 merge 762436c25433b7bb192e6014cb4e46afc58dfc4b and move the active task to the external-transport stage.

Ownership

Fresh open-PR revalidation found these two contracts unowned. MODULE_CATALOG.md and CHANGELOG.md remain owned by Draft PR #23 and are explicitly deferred; this PR does not touch them.

Authority

runtime_access:none, mutation_authorized:false. No Official Tibia runtime operation is performed or authorized by this docs change.