feat: k9iser Phase 1 — config parser, K9 contract generation, validator, tests

Manifest redesigned for K9 contracts: [project] with safety tiers,
[[configs]] with four pillars (must/trust/dust/intend), [validation] options.
Backward compatibility preserved via optional [workload] section.

Parser: TOML/YAML/JSON/INI config file reading and key-value extraction.
Contract generator: produces .k9 contract files from parsed configs + rules.
Validator: checks configs against contracts, produces violation reports.
ABI types: SafetyTier, K9Contract, ValidationResult, ConfigFormat.

45 tests passing (19 unit + 19 binary + 7 integration).

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

Author: hyperpolymath

examples/web-app/config/app.toml

@@ -0,0 +1,33 @@
+# Web application configuration
+# This file is wrapped into a K9 contract by k9iser
+
+[server]
+host = "0.0.0.0"
+port = 8080
+workers = 4
+max-connections = 1024
+read-timeout = 30
+write-timeout = 30
+
+[database]
+url = "postgres://db-host:5432/webapp"
+pool-size = 20
+idle-timeout = 300
+max-lifetime = 3600
+
+[logging]
+level = "info"
+format = "json"
+output = "stdout"
+
+[security]
+cors-origins = ["https://app.example.com"]
+rate-limit = 100
+session-timeout = 3600
+csrf-protection = true
+
+[cache]
+backend = "redis"
+url = "redis://cache-host:6379/0"
+ttl = 300
+max-memory = "256mb"

examples/web-app/k9iser.toml

@@ -0,0 +1,30 @@
+# k9iser manifest — web application config example
+# SPDX-License-Identifier: PMPL-1.0-or-later
+
+[project]
+name = "web-app-config"
+safety-tier = "yard"             # yard = medium risk (staging/internal)
+
+[[configs]]
+name = "app-config"
+source = "config/app.toml"
+format = "toml"
+# Must rules — required constraints:
+must = [
+    "server.port > 0",
+    "server.port < 65536",
+    "server.host != ''",
+    "database.pool-size > 0",
+    "database.pool-size <= 100",
+]
+# Trust sources — who verified this config:
+trust = ["signed-by: ci-pipeline", "reviewed-by: platform-team"]
+# Dust rules — cleanup actions:
+dust = ["remove: deprecated-keys", "remove: legacy-flags"]
+# Intend declarations — purpose:
+intend = ["production-ready", "security-reviewed"]
+
+[validation]
+strict = true
+auto-fix = false
+report-format = "text"