Release 0.14.0

- multivac repos check: offline clone and setup check per repo (MV-132)
- code reaches a repo only through the branch of an open change; pre-merge-commit hook and verify --range for CI (MV-137)
- the brain keeps .multivac/ecosystem.json, a graph of its own declarations (MV-139)
- repos sync and the lifecycle install the SDD and grapher they declare (MV-129)
- the SDD init and graphify's install follow the declared doors (MV-130, MV-131)
- change apply carries SDD files onto the change branch (MV-133)
- change land commits the graph on the change branch; graph work stays in the named repos (MV-134)
- a project document is judged against its tool's own template (MV-135)
- init and the skill lay out session zero in order; seed reports setup (MV-136)
- verify in a consumer's change worktree finds its brain from the path (MV-138)
- the graph's promises match what happens (MV-140)
- repos and doctor report clone state; the documentation describes the flow end to end (MV-141)