Killer loop demo

Fixed replay: edit contract.clause_4 by node id, show semantic diff, relock to UNSIGNED, then optionally publish a permanent link. Trust Pack: a human signs the lock (SIGNED); another agent edit relocks and drops the signature back to UNSIGNED. Tampering content without relock is shown on the verify page as SIGNED_BUT_BROKEN.