Deterministic spec lint for manifest-driven golden paths — validates invariants, detects…