feat(validator): manifest-validator (F02) + bad-manifest фикстуры (F04)

Правила: id не ru.shturman.*, shturman_api поддержан, len(tiles)<=ui_tiles, vehicle_read из каталога.
Фикстуры good + bad-{id-reserved,api,tiles-quota,vehicle-read}; 6 тестов.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
Signed-off-by: Alexander <akotenev2003@gmail.com>

fixtures/manifests/bad-vehicle-read.yaml

@@ -0,0 +1,8 @@
+# vehicle_read с сигналом вне каталога data-model.
+plugin:
+  id: dev.example.bogus
+  name: "Выдумщик"
+  version: 0.1.0
+  shturman_api: "1"
+capabilities:
+  vehicle_read: [rocket_boost]