API: migrate package-defect handling to CM patches (Phase 1, #128)

[ryukzak]

Phase 1 of the #128 migration (see docs/design/defect-handling-migration.md, PR #173): move the example preprocessPackage defect workarounds onto CanonicalManager's composable patches runtime (shipped in CM #14). Codegen-only; no CM changes.

Helpers + combinators — src/api/patches/

Unscoped transform helpers, scoped by nesting combinators:

• Combinators: forPackage(match, handlers) and forResource(url, handlers) — scope a list of handlers (nest freely).
• Transforms: injectDependency(deps), renameCanonical(renames), renameReferenceTarget(renames), swapBinding(swaps) (scoped via combinators); renamePackage(renames) and patchCodeSystem(url, codes) (self-matching).

APIBuilder

• New patches?: PatchesInput constructor option — each phase accepts a single handler or a list — normalized to CM's Partial<Patches> (arrays). Warns if combined with an injected manager/register (which owns its own patch wiring).

Examples migrated off preprocessPackage

// kbv
patches: { package: forPackage("de.basisprofil.r4", [injectDependency({ "hl7.fhir.r4.core": "4.0.1" })]) }

// norge
patches: {
  package: [
    forPackage((pkg) => needsCoreDependency(pkg.name), [injectDependency({ "hl7.fhir.r4.core": "4.0.1" })]),
    renamePackage(packageNameFixes),
  ],
  resource: forResource(".../gd-RelatedPerson", [renameReferenceTarget({ /* Person→Patient ×3 */ })]),
}

// ccda (on its manual CM — nesting forPackage > forResource)
patches: { resource: [
  forPackage("hl7.cda.uv.core", [renameCanonical({ ".../IVL_TS": ".../IVL-TS" })]),
  forPackage("hl7.cda.us.ccda", [forResource(".../CarePlanAct", [swapBinding({ "<nlm>": "<v3-xDocumentActMood>" })])]),
  patchCodeSystem("http://hl7.org/fhir/bundle-type", ["bundle", "subscription-notification"]),
] }

kbv, norge, and ccda have no preprocessPackage left.

Notes

• Pins CM to 0.0.24-canary… (the published build with the patches API) — interim; repin to the proper release once CM minor fixes for Type Schema Writing  #14 ships.
• Follow-up: P1.7 — surface manager.report() in prettyReport.

Verification

• Standard suite 238/0; cda 9/0; local-package 17/0.
• test-on-the-fly-example (kbv 5/0, norge 3/0) and test-typescript-ccda-example (24/0) green — all three examples regenerate (Status: Success) and their generated code typechecks.
• make all is green up to the pre-existing sql-on-fhir "Library not found" failure (fixed separately in PR API: fix SQL-on-FHIR generation by adding the missing hl7.fhir.r5.core dependency #175; unrelated to Phase 1) — it aborts there, so the example targets above were run directly to validate.