feat: add k9iser.toml and generate K9 contracts

Adds k9iser manifest for echidna (yard tier). Sources: Cargo.toml,
deno.json, Justfile, Containerfile, CI workflows. Rust+Deno prover platform.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

Author: hyperpolymath

k9iser.toml

@@ -0,0 +1,60 @@
+# SPDX-License-Identifier: PMPL-1.0-or-later
+# Copyright (c) 2026 Jonathan D.A. Jewell (hyperpolymath) <j.d.a.jewell@open.ac.uk>
+#
+# k9iser manifest for echidna
+# Generates K9 contracts from repo configuration files.
+# echidna is a neurosymbolic theorem proving platform (Rust + Deno)
+
+[project]
+name = "echidna"
+safety_tier = "yard"
+
+[[source]]
+path = "Cargo.toml"
+type = "cargo"
+output = "generated/k9iser/cargo-manifest.k9"
+
+[[source]]
+path = "deno.json"
+type = "deno"
+output = "generated/k9iser/deno-workspace.k9"
+
+[[source]]
+path = "Justfile"
+type = "justfile"
+output = "generated/k9iser/justfile-recipes.k9"
+
+[[source]]
+path = "Containerfile"
+type = "containerfile"
+output = "generated/k9iser/container-build.k9"
+
+[[source]]
+path = ".github/workflows/hypatia-scan.yml"
+type = "workflow"
+output = "generated/k9iser/ci-security.k9"
+
+[[source]]
+path = ".github/workflows/codeql.yml"
+type = "workflow"
+output = "generated/k9iser/ci-codeql.k9"
+
+[[constraint]]
+rule = "build.dependencies has no banned_packages"
+severity = "error"
+
+[[constraint]]
+rule = "services.prover.environment contains 'VERISIMDB_URL'"
+severity = "warn"
+
+[[constraint]]
+rule = "container.base_image uses chainguard or distroless"
+severity = "warn"
+
+[[constraint]]
+rule = "workflows includes hypatia-scan"
+severity = "error"
+
+[[constraint]]
+rule = "deno.imports has no npm: specifiers"
+severity = "error"