runtime: canonicalize snapshot store semantics and revalidate persisted snapshots

Implement canonical base graph and mutation policy

Add live admission for rendered child snapshots

Add snapshot lineage and parent-based mutation runtime (#49)

Render admitted snapshots into artifact bundles

Add managed snapshot runtime behind OpenEnv server

Full OpenRange implementation: environment, builder, validator, agents, tests