Add safe snapshot provenance and CI artifacts

[askmy-stack]

Summary

• add optional, redacted provenance sidecars for captured snapshots
• support approved Git-tracked snapshot baselines with clear documentation
• add opt-in comparison artifacts containing the candidate and both reports
• preserve default CLI and Action behavior, with complete validation coverage

Verification

• ...................................................... [100%] (54 passed)
• All checks passed!
• 41 files already formatted
• Success: no issues found in 14 source files
• Successfully built tool_semantics-0.2.0.tar.gz and tool_semantics-0.2.0-py3-none-any.whl

Closes no issue.

[cursor]

Bugbot is not enabled for your account, so this pull request was not reviewed.

Enable Bugbot in the Cursor dashboard to get automatic reviews on future PRs.