Add instrument calibration graph guard

[soave0529-oss]

/claim #17

Adds a self-contained instrument-calibration-graph-guard package for Scientific Knowledge Graph Integration.

This slice validates whether instrument/tool graph nodes and experiment edges can be published or used for recommendations without misleading researchers about calibration validity. It checks stable instrument identity, calibration certificate metadata and artifact hashes, certificate validity/revocation, experiment timestamp coverage, measurement unit compatibility, and recommendation hold controls.

Why this is distinct:

• not broad entity extraction
• not ontology aliasing
• not sample custody
• not software dependency provenance
• not funding provenance
• not chemical identity
• not image metadata
• not protocol-deviation checks

Artifacts included:

• deterministic synthetic graph packets
• JSON results
• Markdown reviewer report
• SVG summary
• short MP4 demo artifact

Validation run locally:

• npm test
• npm run demo
• node --check src/index.js
• node --check scripts/demo.js
• node --check test/instrumentCalibrationGraphGuard.test.js
• git diff --check

Boundaries:

• synthetic graph packets only
• no lab system integration
• no private experiment data
• no external APIs
• no credentials
• no live compliance claims

AI-assisted with OpenAI Codex; I reviewed the implementation and kept the module isolated.