feat(analyzer): report identifier spans from workshop-rs provenance

[e54-bot]

Summary

• Bump workshop-rs to 1.1.0, which records identifier-level source spans for declarations, action targets and callees, and nested values (wrightkit/workshop-rs#324, wrightkit/workshop-rs#325).
• SemanticIndex now takes declaration/write/call/read spans from the provenance accessors (*_name_span, action_identifier_span, rule_event_name_span, condition_value_span, action_argument_value_span); visit_value_tree threads the child-position path the nested-value accessors address by.
• Text-search identifier recovery is removed from the raw build path; absent provenance reports span: null (unmapped per docs/agent-contract.md), never an enclosing span. The provider-authored-source search stays confined to build_with_sources, and its condition fallback no longer mistakes a ValueId for a condition index.
• Lint findings that name an expensive call now point at the call expression instead of the enclosing action.

Provider (OPY/DEL) note

The mapped-text SourceMap carries declaration name spans, so provider programs still report exact declaration spans, but the format cannot attach action identifiers, rule/event names, or nested value nodes — writes, calls, definitions, and nested reads on mapped OPY/DEL input now report unmapped instead of a coarse enclosing span. That is the contract this issue specifies; restoring identifier fidelity there is the providers' job once wrightkit/workshop-rs#328 extends the map format.

Test plan

• overpy-cake.ws: every cakePos/i2/candlePos reference slices to the identifier and the declaration reference is present
• symbols returns declaration-name spans for the fixture's globals
• nested reads (Add(First Of(Global.cakePos), …), Event Player.stamina inside Add) slice to the identifier
• same-name strings/comments in the action are never reported
• subroutine declaration/definition/call spans slice to the name
• missing provenance reports unmapped, never the enclosing span
• cargo fmt --all -- --check, cargo clippy --workspace --all-targets --all-features -- -D warnings, cargo test --workspace --all-targets --all-features, git diff --check all clean

Closes #433