omdsh-dev/omdsh-runtime: Auditable Profile Pack Toolchain for DSH

`omdsh-dev/omdsh-runtime` is a lightweight Profile Pack toolchain designed for the DSH ecosystem, aiming to address the lack of auditable checklists, fixed sources, unclear licensing, and difficult signature verification in multi-plugin compositions. It reuses official Harness operations to provide deterministic plan/apply steps, candidate versions, explicit confirmation, and a rollback path to the previous generation, without introducing additional Loaders or daemons. Core capabilities include: 1. Fixing composition boundaries by recording precise Registry Releases, author self-hosted Git commits, and Runtime versions to form an auditable manifest; 2. Generating an SPDX license facts manifest to assist with manual review; 3. Supporting Ed25519 publisher signature verification to reject...