ci+docs: reverse engine-contract CI job; point install story at @opencoven/cli

Adds a (non-blocking, bootstrap) job that runs coven's engine contract tests
against this engine, and updates install.sh/install.ps1/npm to recommend the
unified `@opencoven/cli` while keeping standalone installs working.

Author: BunsDev

AGENTS.md

@@ -26,6 +26,7 @@ Agent-facing rules for working on Coven Code. Mirrors and extends `src-rust/.cla
 - NEVER modify generated files directly. Generated artefacts in this repo:
   - `src-rust/Cargo.lock` — regenerated by cargo; for version bumps use [`scripts/bump-version.py`](scripts/bump-version.py).
   - `npm/package.json` `version` field — also stamped by `bump-version.py`.
+- Contract surfaces (see COVEN.md "Engine contract") are semver-guarded — breaking them requires a contract version bump.
 
 ## Commands
 

COVEN.md

@@ -100,6 +100,17 @@ Add Coven-specific tools (e.g. `coven_session_tool.rs`) and register in `tools/s
 
 ---
 
+## Engine contract
+
+coven-code is the engine behind the unified `coven` CLI. The exact CLI/env/
+stream surfaces coven depends on are specified in
+[coven/docs/ENGINE-CONTRACT.md](https://github.com/OpenCoven/coven/blob/main/docs/ENGINE-CONTRACT.md)
+(`contract_version: 1`). Do not change flags, output formats, or exit codes
+listed there without bumping the contract version and coordinating a coven
+`engine.lock` update.
+
+---
+
 ## Release checklist
 
 When cutting a `coven-code` release: