feat(server): align ums.api Authorization/Graph with Ums.Sdk.Contracts

Server-side AuthorizationGraph now declares schemaVersion 1.0.0 as a
first-class property, sourced from Ums.Sdk.Contracts.SchemaVersion.Current.
This ensures the wire payload carries the schema version field required
by every SDK runtime's compatibility check (ADR-0074).

Changes
- Ums.Domain.csproj references ../../../libs/sdk/dotnet/Ums.Sdk.Contracts
  via ProjectReference. No runtime behavior change beyond the new property.
- Ums.Domain/Authorization/Graph/AuthorizationGraph.cs adds:
    public string SchemaVersion { get; init; } = Ums.Sdk.Contracts.SchemaVersion.Current;
  with the same default propagated through the Build(...) factory.

Build
- Ums.sln builds clean (Debug + Release).
- 160 pre-existing warnings unchanged.
- Ums.Domain.Test: 708/708 PASS.
- Ums.Application.Test AuthorizationGraphBuilderServiceTests: 7 failures are
  PRE-EXISTING on the baseline (confirmed by isolating the change via stash
  and re-running). The failures live in SetupFullChain() line 255 and are
  unrelated to the schemaVersion addition. They will be addressed in a
  separate fix tied to the working-tree Tenant.cs / repository / seeder
  changes already in flight.

Non-goals (deferred to a follow-up PR)
- Replacing the server's domain DTOs with Ums.Sdk.Contracts records. The
  domain model keeps its types; only the schemaVersion contract field is
  surfaced. A future canonicalization pass can adopt the SDK DTOs at the
  wire boundary (serializers) once test failures are cleared.

Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>

Author: beyondnetPeru

src/apps/ums.api/Ums.Domain/Authorization/Graph/AuthorizationGraph.cs

@@ -16,6 +16,13 @@ namespace Ums.Domain.Authorization.Graph;
 /// </summary>
 public sealed record AuthorizationGraph
 {
+    /// <summary>
+    /// Schema version of this payload. Governed by ADR-0074 and aligned with the canonical
+    /// `auth-graph.schema.json` in <c>src/libs/sdk/contracts/</c>. Defaults to the value
+    /// constant declared by <c>Ums.Sdk.Contracts.SchemaVersion.Current</c>.
+    /// </summary>
+    public string SchemaVersion { get; init; } = global::Ums.Sdk.Contracts.SchemaVersion.Current;
+
     /// <summary>Who is authenticated and in which context (tenant, suite, role, branch).</summary>
     public GraphContext Context { get; init; }
 
@@ -79,6 +86,7 @@ public static AuthorizationGraph Build(
 
         return new AuthorizationGraph
         {
+            SchemaVersion     = global::Ums.Sdk.Contracts.SchemaVersion.Current,
             Context           = context,
             Authentication    = authentication,
             Actions           = actions,

src/apps/ums.api/Ums.Domain/Ums.Domain.csproj

@@ -11,6 +11,10 @@
     <PackageReference Include="BeyondNetCode.Shell.Ddd.ValueObjects" Version="1.0.0" />
   </ItemGroup>
 
+  <ItemGroup>
+    <ProjectReference Include="../../../libs/sdk/dotnet/Ums.Sdk.Contracts/Ums.Sdk.Contracts.csproj" />
+  </ItemGroup>
+
   <ItemGroup>
     <InternalsVisibleTo Include="Ums.Domain.Test" />
   </ItemGroup>