hyperframes: add HTML/CSS/GSAP as a parallel composition runtime

Separates creative grammar (renderer_family) from technical engine
(render_runtime) so HyperFrames can stand alongside Remotion as a
first-class runtime instead of masquerading as a Remotion sub-case.
Locks runtime choice at proposal stage and enforces it end-to-end: the
schemas require it, video_compose routes by it, the reviewer fails
closed on silent swaps, and a parametrized contract test walks every
pipeline manifest to ensure each planning-stage skill explains the
conversation to the user. Adds hyperframes_compose (scaffold/lint/
validate/render/doctor/add_block), a playbook -> CSS style bridge, and
vendored HyperFrames Layer 3 skills from commit d291358, pinned via
PROVENANCE.md for future re-sync. Final_review now records
render_runtime_used and runtime_swap_detected so compose lies are
catchable after the fact.

pipeline_defs/cinematic.yaml

@@ -233,6 +233,7 @@ stages:
       - audio_enhance
     tools_available:
       - video_compose
+      - hyperframes_compose
       - audio_mixer
       - video_stitch
       - video_trimmer
@@ -245,6 +246,8 @@ stages:
       - Motion-required delivery was preserved without silent fallback
       - Audio dynamics are controlled and intelligible
       - Letterbox or frame treatment improves rather than harms the output
+      - "render_runtime in edit_decisions matches proposal_packet — silent swap is a CRITICAL governance violation"
+      - "Cinematic work typically picks render_runtime='remotion' (CinematicRenderer) for video-led pieces; render_runtime='hyperframes' for kinetic title cards and HTML/GSAP-driven trailers"
     success_criteria:
       - Schema-valid render_report artifact
       - Output file exists and passes ffprobe validation