feat(vagrant): v0.3.0 — substrate-port rig + animations + locomotion

- humanoid.rig.json rewrite: legs->root, rest.rot+rest.scl on all bones,
  Y-mirror via scl=-1 on leg_l/r/foot_l/r, locomotion-block with
  procedural footplant config
- walk.anim.json: substrate walk_fwd_lower port; track=lower; pos+scl
  channels on legs+feet
- walk_upper.anim.json (NEW): substrate walk_upper port; arm-swing
- idle.anim.json: substrate idle_upper port; pos+rot on shoulders+arms
- init.lua: walk_upper parallel-play wiring
- manifest bump v0.2->v0.3; puppet dep ^0.3.0

manifest.module

@@ -1,6 +1,6 @@
 {
     "id": "vagrant-skeleton",
-    "version": "0.2.0",
+    "version": "0.3.0",
     "kind": "module",
     "api": "^0.1",
     "ci_frames": 60,
@@ -15,7 +15,7 @@
         {"id": "lib-core.camera",                 "version": "0.3.0"},
         {"id": "lib-core.render",                 "version": "0.1.0"},
         {"id": "lib-core.maps",                   "version": "0.1.2"},
-        {"id": "lib-core.puppet",                 "version": "0.2.0"},
+        {"id": "lib-core.puppet",                 "version": "^0.3.0"},
         {"id": "lib-asset.prototype-subterrain",  "version": "0.1.0"}
     ]
 }