fix(deps): cascade composition 0.4.0 + crafting 0.5.0 pins

Phase J (2026-08-03) bumped lib-core.composition 0.3.0->0.4.0 and
lib-core.crafting 0.3.0->0.5.0, but only vagrant-skeleton and
lib-core.crafting themselves were updated. Dependent manifests kept the
old pins, so dep-fetcher saw disagreeing pins on the same lib and
refused to start both spine-prototype (ENGINE_ERR_LIB_DEP_MISSING,
rc=19) and vagrant-skeleton ("dep check failed", conflict on
lib-core.composition + lib-core.crafting).

Unify all pins on the on-disk versions. No code changes required:
composition 0.4.0 is purely additive (the quality/condition loud-error
was removed; no signature changed), and crafting-display only consumes
crafting.can_craft + crafting.list_recipes, both still present, and
never referenced the `form` field retired by ADR-0055.

README "Requires:" lines synced to match the manifests (Gate 3).

milestone-check.sh: GREEN (build, ctest, smoke, devwrap-ci,
test-all-modules + anomaly scan). vagrant-skeleton headless run clean
at 60 CI frames.

Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>

README.md

@@ -2,9 +2,9 @@
 
 Foundational end-to-end demo module from the bootstrap phase. Loads `lib-core.maps` and demonstrates lib-composition with basic player movement, free-pan camera, click-select, RMB-move, and proximity-triggered interactions. Self-exits after 30 frames for CI.
 
-**Version:** 0.1.0  
+**Version:** 0.3.2  
 **Module-ID:** spine-prototype  
-**Requires:** lib-core.maps v>=0.1.1, lib-core.render v>=0.1.0, lib-core.camera v>=0.3.0, lib-core.selection v>=0.1.0, lib-core.input v>=0.4.0, lib-core.player_control v>=0.1.0, lib-core.interaction v>=0.1.0, lib-core.command v>=0.1.0  
+**Requires:** lib-core.maps v0.5.7, lib-core.render v0.2.0, lib-core.camera v0.3.0, lib-core.selection v0.1.0, lib-core.input v0.4.0, lib-core.player_control v0.2.0, lib-core.actor v0.1.0, lib-core.interaction v0.1.0, lib-core.command v0.1.0, lib-core.composition v0.4.0, lib-asset.prototype-fa-starter v0.2.0  
 **Tags:** demo, skeleton, foundational, tile-map
 
 ## Topology
@@ -47,7 +47,7 @@ graph LR
 ## Demonstrates
 
 - End-to-end bootstrap of a module: manifest deps -> init -> update -> render -> cleanup.
-- Lib-composition: 8 libs (maps, render, camera, input, selection, command, player_control, interaction) wired together in one module.
+- Lib-composition: 10 libs (maps, render, camera, input, selection, command, player_control, actor, interaction, composition) wired together in one module, plus the `lib-asset.prototype-fa-starter` asset pack.
 - Tile-based map loading + walkability queries via `lib-core.maps`.
 - Free-pan + follow camera through `lib-core.camera` (`set_target`, `bind_pan_keys`, `update`).
 - Click-select / drag-box / modifier-keys via `lib-core.selection`.

manifest.module

@@ -1,6 +1,6 @@
 {
     "id": "spine-prototype",
-    "version": "0.3.1",
+    "version": "0.3.2",
     "kind": "module",
     "api": "^0.1",
     "ci_frames": 30,
@@ -10,7 +10,7 @@
     },
     "deps": [
         {"id":"lib-core.maps","version":"0.5.7"},
-        {"id":"lib-core.render","version":"0.2.0"},
+        {"id":"lib-core.render","version":"0.3.0"},
         {"id":"lib-core.camera","version":"0.3.0"},
         {"id":"lib-core.selection","version":"0.1.0"},
         {"id":"lib-core.input","version":"0.4.0"},
@@ -18,7 +18,7 @@
         {"id":"lib-core.actor","version":"0.1.0"},
         {"id":"lib-core.interaction","version":"0.1.0"},
         {"id":"lib-core.command","version":"0.1.0"},
-        {"id":"lib-core.composition","version":"0.1.0"},
+        {"id":"lib-core.composition","version":"0.4.0"},
         {"id":"lib-asset.prototype-fa-starter","version":"0.2.0"}
     ]
 }