Add OrgGov state integrity binding

[mdheller]

Summary

Adds the SourceOS local-first state-integrity binding slice for SocioProphet/prophet-platform#406 and #13.

This connects OrgGov work orders to SourceOS state reports, index lanes, policy decisions, canonical events, repair posture, evidence refs, and operator narrative.

Added

• schemas/orggov-state-integrity-binding.v0.1.schema.json
• examples/orggov/state-integrity-binding.v0.1.example.json
• docs/orggov-state-integrity-binding.md
• tools/validate_orggov_state_integrity_binding.py

Validation posture

Expected local validation:

ok: examples/orggov/state-integrity-binding.v0.1.example.json validates
OK: OrgGov state integrity binding validation passed

Non-goals

• Does not implement live runtime emission.
• Does not perform destructive repair.
• Does not expose raw noisy logs as the product surface.
• Does not store secrets, credentials, raw private prompts, or private local state.