fix(normalize): cover modern IDs, matrix params, gRPC-Web and tRPC

[lorenzozanee]

What does this PR do?

Fixes #97 — deterministic normalization fragments or over-merges for modern IDs (TypeID/ULID/KSUID/nanoid/cuid/Stripe/base62), case-sensitive IDs, matrix params, gRPC-Web and tRPC. The change extends Tier-0/Tier-1 to classify those IDs, preserve case for opaque IDs, strip ; matrix params, and model gRPC-Web/tRPC as operations.

Type of change

• Bug fix
• New feature / agent
• Security tool / MCP server / Bolt plugin
• Agent skill / knowledge base
• UI / TUI improvement
• Documentation
• Refactor / performance
• CI / infrastructure

Security impact

• This PR adds or modifies tool execution (shell, file, network)
• This PR changes agent permissions or scope
• This PR modifies authentication / authorization logic
• This PR has no security impact

How did you verify it works?

Verified with deterministic harness covering the five gaps and existing normalize tests.

Checklist

• bun turbo typecheck passes
• Tested locally with at least one LLM provider
• PR is focused on a single change
• No secrets, credentials, or API keys in the diff
• Breaking changes are documented (if any)