feat: module architecture improvements — session keys, dependency graph, event dispatcher, deactivation hooks

Six targeted improvements to the modular monolith platform:

1. Fix AddressBook session key prefix to follow module.<id>.* convention
2. Move ADDRESS_BOOK_VIEW permission constant from core PermissionService into module
3. Add declarative JSON schema for module manifests (.agents/contracts/)
4. Add `requires` field with missing-dependency and circular-dependency detection
5. Add lightweight fire-and-forget event dispatcher (user.created/deleted/login/logout)
6. Add module deactivation hook interface and CLI script (bin/module-deactivate.php)

Includes 15 new architecture/unit tests covering all new functionality.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

lib/App/registerContainer.php

@@ -10,6 +10,7 @@ use MintyPHP\App\Container\Registrars\RepositoryFactoryRegistrar;
 use MintyPHP\App\Container\Registrars\ServiceFactoryRegistrar;
 use MintyPHP\App\Container\Registrars\SettingsRegistrar;
 use MintyPHP\App\Container\Registrars\UserRegistrar;
+use MintyPHP\App\Module\ModuleEventDispatcher;
 use MintyPHP\App\Module\ModuleRegistry;
 
 $container = new AppContainer();
@@ -43,6 +44,10 @@ $modulesDir = dirname(__DIR__, 2) . '/modules';
 $moduleRegistry = ModuleRegistry::boot($modulesDir, $enabledModules);
 
 $container->set(ModuleRegistry::class, static fn (): ModuleRegistry => $moduleRegistry);
+$container->set(ModuleEventDispatcher::class, static fn () => new ModuleEventDispatcher(
+    $moduleRegistry->getEventListeners(),
+    $container
+));
 
 // Disallow overriding existing core bindings from module registrars.
 $container->protectExistingBindings();