Support Card Index activation compatibility

[KimGLee]

Summary

• accept the canonical Card Index as the only non-route path in a frozen selected_card_paths set
• deliver its exact bytes as startup navigation without assigning it an Rxx identity
• keep every selected Runtime Card mandatory and reject all other unregistered extra paths
• bump the card-context delivery capability to 1.0.2 and regenerate its machine contract

This closes the adopter compatibility gap found while exercising the D-008 protocol against Agent Systems Atlas. It preserves the architectural split: Card Index is navigation, Runtime Cards are executable route guidance, and both enter the same content-addressed activation Bundle when explicitly frozen.

Verification

• 12 focused Card activation tests pass
• real Atlas AF-048 activation compiles 8 selected Runtime Cards, the Card Index startup payload, and 12 read-back rules with zero context errors
• make check passes
• git diff --check passes

Fixes #115