feat(ts): certify Podman and enforce zero-dependency core

[clfhhc]

Summary

• add the independently certified rootless Podman Libpod API v0 family for the D642 local profile
• remove third-party framework and native integration implementations from @graphrefly/ts after their standalone packages were published
• enforce no dependencies, optionalDependencies, or peerDependencies in the core package
• retain only framework-neutral reactive-layout measurement contracts in core

Release

• two minor changesets prepare @graphrefly/ts@0.7.0 through the existing Changesets/OIDC workflow
• no manual npm publish is used

Verification

• pnpm run lint
• pnpm test — 116 files, 1832 passed, 1 live test skipped in the default run
• pnpm run build — ESM/CJS/DTS plus packed export checker
• D645 live Podman certifier — 3/3 passed on the exact supported host
• post-run residue scan — zero matching containers, networks, or secrets

Scope correction

The clean rebase removed two unrelated rate-limit assertions that had leaked into the original D647 test commit without their implementation; rate-limit behavior is not part of this release.