feat(linkedin-studio): per-edition lived-specifics binding + kilder artifact (fix #2 slice 2)

Slice 2 of fix #2 (kilde-så-draft): the per-edition bridge between the global
specifics-bank (slice 1) and a draft. In scripts/specifics-bank:

- binding.ts — livedSpecifics slot-map model + validateBinding, the «vaghet
  avvises» gate (G4). BLOCK on unresolved / dangling specific-id / unjustified
  abstrakt; WARN on an unverified-number-backed slot (regel 6/7); PASS otherwise.
- kilder.ts — renderKilder, the read-only NN-kilder.md sources ledger, rendered
  deterministically from the slot-map + bank (coverage via validateBinding, so
  the artifact and the skeleton-gate cannot disagree).
- cli.ts — validate-binding (exit 1 = BLOCK) + render-kilder subcommands.

edition-state schema gains articles.NN.livedSpecifics ({ slots, status }) + _doc.
Design record + the Step 2 research re-scope spec: docs/fix2/slice2-binding.md.

Wiring into newsletter.md (Step 1.5 elicitation + Step 2.5 gate + pipeline 17->18)
is slice 3 — not in this commit.

Tests 28/28 (specifics-bank; +9 binding +4 kilder), tsc clean, plugin gate 83/0/0
unaffected, gitleaks clean on all 8 files.

[skip-docs] internal plumbing — no command/agent/pipeline surface change until
slice 3 wires it; documenting it in the user-facing root CLAUDE.md/README now would
overclaim unreachable functionality. Docs ARE updated where they belong: the design
record docs/fix2/slice2-binding.md, scripts/specifics-bank/README.md, and the
edition-state _doc. Root-doc update lands with the slice-3 wiring feat.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

scripts/specifics-bank/src/cli.ts

@@ -14,6 +14,8 @@
  * Exit code: 0 on success, 2 on usage error.
  */
 
+import { readFileSync, writeFileSync } from "node:fs";
+
 import {
   addSpecific,
   defaultBankPath,
@@ -21,6 +23,9 @@ import {
   queryByTopic,
   saveBank,
 } from "./bank.js";
+import { validateBinding } from "./binding.js";
+import { renderKilder } from "./kilder.js";
+import type { LivedSpecifics } from "./binding.js";
 import type { SpecificType, Verification } from "./types.js";
 
 const VALID_TYPES: SpecificType[] = [
@@ -65,11 +70,35 @@ function usage(msg: string): never {
     "usage:\n" +
       "  query --tags <a,b> [--bank <path>] [--json]\n" +
       '  add --type <t> --content "<text>" --tags <a,b> [--source <s>] [--verification <v>] [--bank <path>]\n' +
-      "  list [--bank <path>] [--json]",
+      "  list [--bank <path>] [--json]\n" +
+      "  validate-binding --edition <edition-state.json> [--article <id>] [--bank <path>] [--json]\n" +
+      "  render-kilder    --edition <edition-state.json> [--article <id>] [--bank <path>] [--out <path>]",
   );
   process.exit(2);
 }
 
+/** Minimal shape of edition-state.json that the binding subcommands read. */
+interface EditionArticle {
+  title?: string;
+  livedSpecifics?: LivedSpecifics;
+}
+interface EditionState {
+  currentArticle?: string;
+  articles?: Record<string, EditionArticle>;
+}
+
+const EMPTY_LS: LivedSpecifics = { slots: [], status: "pending" };
+
+function loadEdition(path: string): EditionState {
+  return JSON.parse(readFileSync(path, "utf8")) as EditionState;
+}
+
+/** Resolve the target article: explicit --article, else currentArticle, else "01". */
+function resolveArticle(edition: EditionState, flag?: string): { id: string; article: EditionArticle } {
+  const id = flag ?? edition.currentArticle ?? "01";
+  return { id, article: edition.articles?.[id] ?? {} };
+}
+
 function today(): string {
   return new Date().toISOString().slice(0, 10);
 }
@@ -145,6 +174,45 @@ function main(): void {
     return;
   }
 
+  if (command === "validate-binding") {
+    if (!flags.edition || flags.edition === "true") usage("validate-binding needs --edition <path>");
+    const edition = loadEdition(flags.edition);
+    const { id, article } = resolveArticle(edition, flags.article);
+    const ls = article.livedSpecifics ?? EMPTY_LS;
+    const res = validateBinding(ls, loadBank(bankPath));
+    if (asJson) {
+      console.log(JSON.stringify({ article: id, ...res }, null, 2));
+    } else {
+      const c = res.coverage;
+      console.log(`Binding for article ${id}: ${res.verdict}`);
+      console.log(
+        `  slots ${c.total} — levd ${c.specific} · abstrakt ${c.abstrakt} · ekstern ${c.ekstern} · uavklart ${c.unresolved}`,
+      );
+      for (const p of res.problems) console.log(`  ⛔ ${p.slotId}: ${p.reason} — ${p.detail}`);
+      for (const w of res.warnings) console.log(`  ⚠ ${w.slotId}: ${w.detail}`);
+    }
+    process.exit(res.verdict === "BLOCK" ? 1 : 0);
+  }
+
+  if (command === "render-kilder") {
+    if (!flags.edition || flags.edition === "true") usage("render-kilder needs --edition <path>");
+    const edition = loadEdition(flags.edition);
+    const { id, article } = resolveArticle(edition, flags.article);
+    const md = renderKilder({
+      articleId: id,
+      title: article.title ?? id,
+      livedSpecifics: article.livedSpecifics ?? EMPTY_LS,
+      bank: loadBank(bankPath),
+    });
+    if (flags.out && flags.out !== "true") {
+      writeFileSync(flags.out, md, "utf8");
+      console.log(`Wrote ${flags.out}`);
+    } else {
+      process.stdout.write(md);
+    }
+    return;
+  }
+
   usage(command ? `unknown command: ${command}` : "no command given");
 }