does not create a direct behaviour to infra shortcut for explained anomalies

Pin the @cv/graph library used by the QA platform graph projection: annotation builders, the nine-hub ontology + edge registry, Cypher emission for Falkor merges, heat propagation, neighbourhood traversal, source-backed grounding rules, and the QA + ops graph projections. These tests guard the graph contract the qa-platform endpoint exposes.