refactor(objectql): extract metadata-protocol + add lean ./core entry (ADR-0076 Step 1) - #2415

…adata-protocol (ADR-0076 Step 1)

protocol.ts (ObjectStackProtocol impl — sys_metadata CRUD, draft/publish,
locks, package ownership, diagnostics) plus its sys-metadata-repository,
metadata-diagnostics, seed-loader and build-probes helpers were metadata-domain
code living inside @objectstack/objectql for historical reasons. They now live
in a new @objectstack/metadata-protocol package.

- protocol no longer references the concrete ObjectQL class; it is typed against
  an injected MetadataHostEngine interface (engine still injected at runtime).
- Dependency is one-way (objectql -> metadata-protocol); no cycle.
- Non-breaking: objectql re-exports every previously public symbol
  (ObjectStackProtocolImplementation, SysMetadataRepository, SysMetadataEngine,
  SeedLoaderService, runBuildProbes, ...), so existing imports keep working.
- metadata-protocol added to the fixed version group.

Verified: full turbo build green (incl. DTS) across the chain; objectql suite
57 files / 718 tests pass (incl. real-engine protocol integration tests);
runtime + rest + metadata downstream (25 pkgs) build clean.

This is Step 1 of ADR-0076. A later step turns the protocol into a capability
plugin so objectql itself stops depending on it (lean engine by construction).

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

…dary ratchet (ADR-0076)

A thin embedder (e.g. the objectbase gateway) can import `@objectstack/objectql/core`
to get the engine/registry/hooks/validation surface with NO kernel plugin, kernel
factory, or metadata protocol — so `@objectstack/metadata-protocol` (and its 268KB)
never enters its bundle/graph.

- New src/core.ts lean barrel; objectql now builds two entries (index + core) via a
  local tsup config; package.json gains the `./core` export.
- New core-boundary ratchet test walks core.ts's full import closure and fails if
  anything reachable imports @objectstack/metadata-protocol / ./plugin / ./kernel-factory.

Verified: build emits dist/core.{mjs,js,d.ts} with 0 references to metadata-protocol
(vs 5 in index); runtime smoke confirms ObjectQL is exported and ObjectQLPlugin /
ObjectStackProtocolImplementation are not; objectql suite 58 files / 719 tests pass.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

`@objectstack/metadata-protocol` had a `test` script but no test files, so
`vitest run` exited non-zero and failed CI's Test Core (`turbo run test`).
Adds a smoke that imports the package and asserts its public exports + pure
helpers without needing a data engine (protocol behavior is covered e2e by the
objectql suite). Full `turbo run test` now green (126/126 tasks).

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>