fix(ocr): complete dependency and CI integration

[forhappy]

Summary

• grant the OAR text-region geometry dependency a crate/version-scoped BSL-1.0 policy exception
• document the no-safe-upgrade ttf-parser advisory and its unreachable font-parsing path through the Compass OCR API
• bundle the exact Boost 1.0 license in every Compass release archive and document clipper2-rust attribution
• repair post-rebase GraphViewModel test initialization and Rust 1.97 Clippy failures while preserving public workbench types and serialization
• preserve Intel macOS builds by excluding OAR/ONNX on x86_64 macOS, where ort-sys 2.0.0-rc.13 publishes no prebuilt runtime; native PDF/DOCX/PPTX/XLSX processing remains available, and managed OCR/model installation fails explicitly before any download or cache mutation

This is the follow-up to #283, which merged while the final OCR completeness and CI audit was still running.

Verification

• cargo fmt --all -- --check
• cargo deny check
• cargo clippy --workspace --lib --bins --locked -- -D warnings
• cargo test --workspace --lib --bins --locked
• cargo clippy -p compass-ocr --all-targets --all-features --locked -- -D warnings
• cargo test -p compass-ocr --locked
• cargo test -p compass-cli --test document_cli --locked
• cargo check --workspace --lib --bins --target x86_64-apple-darwin --locked
• cargo test -p compass-cli --test document_cli --target x86_64-apple-darwin --no-run --locked
• cargo tree -p compass-ocr --target x86_64-apple-darwin -i ort-sys --locked (no dependency)
• scripts/check_product_boundary.sh
• scripts/qualify_document_ocr_v1.sh --fixtures-only
• exact LICENSE-BOOST content compared with clipper2-rust 1.1.0
• release packaging shell syntax validated