feat: add agent recorder tool

[thiennamdinh]

Summary

• Add tools/agent-recorder, a passive Rust tool for normalizing existing AI-agent session artifacts into flat provenance graph records.
• Support Pi, Codex, Claude Code, Gemini CLI, and OpenCode adapters with sanitized synthetic fixtures and import coverage.
• Add print mode by omitting --recorder, local file record storage, Sync Web record storage/reading, and OpenTelemetry export.
• Add optional initial key-evolving HMAC integrity metadata with local state, read-time verification, status, and emergency rekey workflows.
• Add packaged JSON-LD/Turtle vocabulary files, public Tools documentation, README/reference docs, examples, and Rustdoc for public boundaries.
• Add a separate Agent Recorder Binaries workflow for agent-recorder-v* release assets and switch ledger binary releases to ledger-v* tags.
• Keep the platform version at 1.4.0, journal-sdk at 1.3.0, and agent-recorder at 0.1.0.

Testing

• cd tools/agent-recorder && cargo fmt --check
• cd tools/agent-recorder && jq empty schema/agent-recorder.context.jsonld examples/integrity-agent-record.jsonld tests/fixtures/opencode-combined-export/export.json tests/fixtures/generated-gemini/*.jsonl
• cd tools/agent-recorder && cargo test --examples
• cd tools/agent-recorder && RUSTDOCFLAGS='-D warnings' cargo doc --no-deps
• cd tools/agent-recorder && cargo test
• cd docs/info && rm -rf .astro && npm run build
• CLI smoke: print mode import, file recorder import, integrity import/verify/read, missing --recorder-data failure, stale --source failure, and stale jsonl recorder failure.

Notes/Risks

• Integrity support is documented as initial 0.1.0 tamper-evidence and forward-integrity plumbing for review and experimentation, not a cryptographically audited production guarantee.
• Real hosted Sync Web write smoke was not run because AGENT_RECORDER_SYNC_WEB_API_KEY was not set; CLI wiring was checked up to the expected missing-key error.
• Docs build completes with the existing Node/Pagefind DEP0190 warning from the search-index tooling.
• The existing ledger binary release was renamed from v1.4.0 to ledger-v1.4.0 and the release title is now Ledger v1.4.0.