Fix dependency alerts and define AI-readable contracts

[rajanbor]

Outcome

• upgrades the tooling dependency graph to patched releases and forces esbuild >=0.28.1
• leaves pnpm audit --audit-level=low with zero known vulnerabilities
• adds ADR-0001 for human- and AI-readable contracts
• adds repository-wide operating principles for AI agents
• ships reusable ADR and agent templates with map init
• compiles .map/ into AGENTS.md, CLAUDE.md, GEMINI.md, Cursor, and Copilot instructions

Verification

• pnpm audit --audit-level=low
• pnpm lint
• pnpm typecheck
• pnpm test (137 tests)
• pnpm build
• node library/scripts/build-registry.ts --check
• map doctor (0 problems)
• map optimize --save (2,034 / 12,000 tokens; no substantial duplication)

Supersedes #87 with the complete security update.