feat: scienting-math/1 sources and derived/math.jsonl; lode references; stress fixes

Math content may say its source is in scienting-math/1's canonical TeX (form,
in no hash); derived/math.jsonl holds papermath's tree, symbols and issues,
and the validator now checks derived files. A symbol annotation names its
symbol by key; lode claim references use lode's tag and pin syntax. The zip
reader refuses entries zipfile cannot read, and checkpoint lines end in LF only.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_017R7sgDNvUGWY2zFPCq2JH6

registry/rules.json

@@ -113,6 +113,16 @@
       "description": "document.json's rev is not the number of corrections.",
       "chapter": "spec/22-conformance.md"
     },
+    {
+      "id": "doc.derived.math",
+      "description": "A line of derived/math.jsonl names a formula that is not TeX, says it is complete when its tree has an opaque node or the reverse, or lists symbols that are not the sym keys of its tree.",
+      "chapter": "spec/09-figures-tables-equations.md"
+    },
+    {
+      "id": "doc.derived.node",
+      "description": "A line of a derived file names no equation, equation line or math run of the package.",
+      "chapter": "spec/12-package.md"
+    },
     {
       "id": "doc.fidelity.report",
       "description": "document.json's fidelity distribution does not recompute.",
@@ -208,6 +218,11 @@
       "description": "A location's page_fp is not a page of any witness.",
       "chapter": "spec/22-conformance.md"
     },
+    {
+      "id": "doc.math.form",
+      "description": "A source with a form is not that form's canonical spelling. Only a validator that implements the form can check it; the reference validator does not.",
+      "chapter": "spec/03-nodes.md"
+    },
     {
       "id": "doc.node.attrs",
       "description": "A section has no level.",