Validate v1.0.0 artifacts and privatize reference vault

[gparadis]

Summary

• validate final fhops-1.0.0 wheel/sdist builds and clean wheel smoke installs
• bundle runtime data/** into the installed wheel via fhops.resources.data_path() and declare missing click / PyYAML runtime dependencies
• move full-text/reference-document working files to the private UBC-FRESH/fhops-reference-docs vault and link it as the reference-documents submodule
• add public Sphinx bibliography/access docs explaining why the full-text corpus is private and where public reference notes live

Artifact audit

• twine check dist/* passes
• wheel contains 59 fhops/data/** files, including fhops/data/reference/fpinnovations/tr119_yarding_productivity.json
• wheel/sdist audit found no forbidden docs/references/, docs/softwarex/reference/, notes/, or reference-documents/ payloads

Verification

• .venv/bin/ruff format src tests
• .venv/bin/ruff check src tests
• .venv/bin/mypy src
• .venv/bin/pytest (301 passed, 210 skipped, 61 warnings)
• .venv/bin/pre-commit run --all-files
• PANDOC_DIR=$(.venv/bin/python - <<'PY' ... PY); PATH="$PANDOC_DIR:$PATH" .venv/bin/sphinx-build -b html docs _build/html -W
• fresh wheel smoke: fhops --help, fhops validate examples/tiny7/scenario.yaml, fhops solve-heur ... --iters 25 --seed 7, fhops evaluate ... --assignments ...

Closes #18