[Feargin]

Adds a shared resource catalog for signed modules: API 0.13, schema 52. Durable owner references, reservation of physical files before writing and publication after a durable close rule out the deletion of resources in use based on the local state of a single process. GC is allowed by the core under the protection of reader/backup pins; dependencies are kept until all physical variants are successfully unlinked. A deletion failure is retried, generations protect against repeated publication. Reader/backup get read-only access.

A module receives a frozen bound port without access to the DB pool, namespace and the internal deletion admission. Bootstrap after the first rollout and a logical restore keep GC closed until a full reconciliation. The first rollout requires stopping the old writers; the limitation is reflected in ADR 0089 and the wiki in the supported languages.

Checks of the exact d7a5f82:

• The full public CI 39630000024 succeeded, including Windows 2025 and HA.
• Local quick: 1248 unit, no skips; a separate resource-catalog: 6 PostgreSQL scenarios of races, reader pin, several owners, unlink failures, restore and generations.
• The previous full local integration: 449 checks.
• The consumer on the final core: all 11 real core-e2e, HA on KVM/DRBD/Pacemaker/fencing and all stages of the full verify passed in the Pro run 8b267c4. Real HTTP cleanup, competing API/worker and reads, deletion retry and repeated publication were checked. HA: loss of a standby (13 confirmations/155 retries), partitions with active node-a and node-b (8 confirmations each), verification of bytes and of re-transfer after each failure.

The full verify/release of the Pro consumer 1ae09ec passed: 17 tasks, 66/66 full-parity verdicts, 10 000 crash trials and 11 244 failures without errors; this PR does not assert readiness of a stable production release. Only shared extension points enter the public code.