feat(publication): add rights-aware coloring-book profile

[szmyty]

Summary

• add the bundled coloring-book derivative profile with required validation, network denial, and AI denial
• define schema-bound renderflow.coloring-book/v1 source and renderflow.coloring-book-validation/v1 report contracts
• add an offline renderflow publication coloring-book-preflight command
• bind reviewed text, artwork, rights, approvals, optional provider/model/skill provenance, and page evidence to exact SHA-256 digests
• block unapproved candidates, remote-provider provenance without explicit opt-in, missing or ambiguous rights, unsafe asset paths, duplicate pages, and incomplete geometry/accessibility evidence
• add a redistribution-safe synthetic non-commercial fixture and documentation for authoring, review, preview, build, print proofing, and rollback

No model, hosted provider, network operation, upload, sale, or content-generation path is introduced. Generated artwork remains candidate-only until a human approval reference binds the exact selected digest.

Focused checks

• cargo check --workspace --lib --bins --all-features --locked
• cargo clippy --workspace --lib --bins --all-features --locked -- -D warnings -A clippy::too_many_arguments
• cargo test -p renderflow --lib publication::coloring_book::tests --locked (4 passed)
• deterministic CLI preflight smoke test (two reports compared byte-for-byte)
• bundled coloring-book graph-plan smoke test
• JSON schema syntax checks and git diff --check

The full test suite and GitHub Actions were intentionally deferred for this speed-run, per the working convention.

Closes #348

[devactivity-app]

Pull Request Summary by devActivity

Metrics

Achievements

• @szmyty
  Earned XP: 10⭐
  Check Your Progress