Consume Knot from knot-editor

[mark-ik]

Summary

• pin knot-editor and knot-document to the independent public repository
• align the shared Mere source at 1e59c0b7 so Distillery, Knot, Turnstone, and Cambium use one frozen Genet host API identity
• record the repository boundary and consumer receipts in the browser-surface plan

Receipts

• Cargo metadata source audit: one source identity for Knot and every crossing Mere/Genet contract
• cargo test --lib knot_document_surface::tests --locked -j 1: 5 passed
• cargo test --lib knot_authoring::tests --locked -j 1: 5 passed, 5 environment-gated
• KNOT_ENDPOINT_TEST_BIN= cargo test --lib knot_authoring::tests --locked -j 1 -- --ignored: 5 passed
• git diff --check: passed

Existing baseline

Cargo fmt --check still reports formatting drift in src/action.rs and src/frame_timing.rs; this branch does not modify either file.