hyperframes: add HTML/CSS/GSAP as a parallel composition runtime

Separates creative grammar (renderer_family) from technical engine
(render_runtime) so HyperFrames can stand alongside Remotion as a
first-class runtime instead of masquerading as a Remotion sub-case.
Locks runtime choice at proposal stage and enforces it end-to-end: the
schemas require it, video_compose routes by it, the reviewer fails
closed on silent swaps, and a parametrized contract test walks every
pipeline manifest to ensure each planning-stage skill explains the
conversation to the user. Adds hyperframes_compose (scaffold/lint/
validate/render/doctor/add_block), a playbook -> CSS style bridge, and
vendored HyperFrames Layer 3 skills from commit d291358, pinned via
PROVENANCE.md for future re-sync. Final_review now records
render_runtime_used and runtime_swap_detected so compose lies are
catchable after the fact.

pipeline_defs/animated-explainer.yaml

@@ -230,6 +230,7 @@ stages:
       - video_stitch
     tools_available:
       - video_compose
+      - hyperframes_compose
       - video_stitch
       - audio_mixer
     checkpoint_required: true
@@ -238,6 +239,8 @@ stages:
       - Output video exists and is playable
       - "Duration within +/-5% of target"
       - Audio is clear with proper narration/music balance
+      - "render_runtime in edit_decisions matches proposal_packet — silent swap to another runtime is a CRITICAL governance violation"
+      - "If render_runtime='hyperframes': `hyperframes lint` and `hyperframes validate` must pass before render"
     success_criteria:
       - Schema-valid render_report with output paths
       - Output file exists and passes ffprobe validation