Institutional distribution contract

A governed library model for organizations.

The canonical data model now covers institutional licenses, seats, expiry, and tenant-bound access. Self-service provisioning, billing, private-library administration, and renewal are not yet exposed as a certified production portal.