Evidence-first 2Origin state projection

Key features

• dsh_2origin_status — compact projection, counts, verified-fact count, and recorded-vs-computed hash integrity.
• state_proof verifies one bounded inline state document and returns only integrity, hashes, counts and violations.
• dsh_2origin_diff — read-only semantic diff against a complete candidate JSON document.
• Version, timestamp, actor and stored hash do not create fake content changes.
• dsh_2origin_freeze — requires the hash just observed from status, refuses stale state, creates a content-addressed snapshot with exclusive creation, and verifies it by reading it back.