chore(spec): regenerate the API-surface snapshot for envelopeViolations

`check:api-surface` is a ratchet on `@objectstack/spec`'s public exports, and the
new predicate is an addition to it:

    ./api
      + envelopeViolations (function)
    0 breaking (removed/narrowed), 1 added.

One line, alphabetically beside the other predicates that module already exports.

Two things this caught that are worth writing down.

The gate lives in the TypeScript Type Check job, which runs TEN steps — I had
found four of them by grepping a window of lint.yml that cut off before the rest,
and ran only those. The full list is: spec tsc, check:docs, check:skill-refs,
check:react-blocks, a workspace build, examples typecheck, downstream-contract
typecheck, check:api-surface, check:skill-examples, and the two i18n checks. All
ten pass locally now.

And `gen:api-surface` reads `dist/index.d.ts`, so it fails outright under
`OS_SKIP_DTS=1` — the flag I had been using to keep local builds fast. Rebuilding
spec with declarations is a prerequisite for regenerating the snapshot, not an
optional speed-up.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01CYbS3kS8xzsHNXFTzp4e2z

Author: claude

packages/spec/api-surface.json

@@ -3088,6 +3088,7 @@
     "WorkflowTransitionRequestSchema (const)",
     "WorkflowTransitionResponse (type)",
     "WorkflowTransitionResponseSchema (const)",
+    "envelopeViolations (function)",
     "getAuthEndpointUrl (function)",
     "getDefaultRouteRegistrations (function)",
     "readServiceSelfInfo (function)",