Introduce SAF Framework Model v2

[fkautz]

Summary

• make research/framework-model.yml the canonical version 2 registry for lifecycle, profiles, tactics, typed relationships, evidence status, mitigations, and detection maturity
• define strict technique admission plus evidence, taxonomy, and operational release gates
• add SAF Core, MCP, Code-Agent, RAG and Memory, Financial-Agent, and Model-Lifecycle profiles
• preserve all 86 permanent IDs while consolidating six overlaps as deprecated compatibility records
• generate the public catalog from the model and validate link, label, relationship, profile, lifecycle, and detection consistency in CI
• update the technique template, checklist, scaffolder, research protocol, and author-saf-technique skill with post-freeze ontology reconciliation

Taxonomy result

• 80 active techniques and 6 deprecated compatibility IDs
• canonicalized Cross-Server Tool Shadowing, Post-Approval Tool Mutation, Agentic Confused Deputy, and Response-Borne Covert Channel
• retained all prior clean-room evidence packets and detection artifacts
• calibrated SAF Core to 32 genuinely agentic mechanisms instead of treating nearly every MCP behavior as core

Validation

• python3 scripts/validate-technique-research.py --all (86/86 pass)
• python3 -m unittest discover -s scripts -p test_*.py (12 pass)
• python3 scripts/validate-framework-model.py
• python3 scripts/generate-technique-catalog.py --check
• author-saf-technique skill quick validation

This PR remains draft for framework-level review.