feat: add doc approval analyze capability

[enricopiovesan]

Summary

Adds the doc-approval.analyze reference capability used by doc-approval clients:

• capability contract, app manifest, component manifest, WASM fixture, agent manifest, and runtime request fixture
• deterministic local executor that extracts docType, parties, amounts, confidence, and recommendation
• workspace execute compatibility for the simplified { capability_id, input } payload used by downstream HTTP clients
• component-only persisted app state loading so direct capability apps do not require a workflow entry

Closes #556.

Governing Spec

• 006-runtime-request-execution
• 017-ai-agent-packaging
• 033-http-json-api
• 044-application-bundle-manifest
• 046-public-cli-app-registration
• 054-public-scope-registry-ref
• 056-capability-publish
• 031-supply-chain-hardening

Project Item

• Closes Add doc-approval.analyze capability contract, WASM agent, and app manifest #556 in Project 1.

Validation

• cargo fmt --check
• cargo test -p traverse-cli doc_approval -- --nocapture
• cargo test -p traverse-cli workspace_execute_endpoint_accepts_simplified_capability_request -- --nocapture
• cargo test -p traverse-registry workspace_app_state -- --nocapture
• cargo run -p traverse-cli -- app validate --manifest examples/applications/doc-approval/app.manifest.json --json
• cargo run -p traverse-cli -- agent execute examples/doc-approval/analyze-agent/manifest.json examples/doc-approval/runtime-requests/analyze.json
• cargo run -p traverse-cli -- app register --manifest examples/applications/doc-approval/app.manifest.json --workspace local-default --json
• curl -s -i -X POST http://127.0.0.1:8792/v1/workspaces/local-default/execute -H 'Content-Type: application/json' -d '{"capability_id":"doc-approval.analyze","input":{"document":"Invoice from Acme Corp for $500"}}'
• bash scripts/ci/repository_checks.sh