feat(3.0.0): Algorithm Cards per UAPF v2.3.0 chapter 13

Wrap the three opaque UAPF-IP capabilities (ai.redact@1, ai.extract@1,
event.emit@1) in Algorithm Cards under algorithms/, per UAPF v2.3.0
chapter 13. Each Card supplies intent, IO contract, ownership,
validation history, risk class, audit configuration, and (where
relevant) privacy/risk extensions. Cards are referenced from resource
targets in resources/mappings.yaml.

Changes:
- NEW algorithms/pii_redactor.card.yaml — deterministic redactor
- NEW algorithms/vdvc_semantic_extractor.card.yaml — stochastic LLM
  extractor, EU AI Act high-risk, human oversight mandatory
- NEW algorithms/completion_event_emitter.card.yaml — deterministic
  CloudEvents 1.0 emitter
- uapf.yaml + manifest.json: version 2.0.0 -> 3.0.0,
  + paths.algorithms, + algorithm_cards: true
- resources/mappings.yaml: single agent.semantic-extractor target
  split into 3 algorithm-specific targets, each w/ algorithm_card ref
- bpmn/: UNCHANGED (algorithm-card refs live on resource targets,
  not in BPMN — no extension elements required)
- Removed provides_decisions from manifest (was not in SSOT manifest
  schema; DMN decisions are self-describing via the dmn/ cornerstone)
- README rewritten with algorithm-card audit-question table

algorithms/completion_event_emitter.card.yaml

@@ -0,0 +1,64 @@
+kind: uapf.algorithm.card
+
+id: algo.semantic_document_analysis.completion_event_emitter
+version: "1.0.0"
+name: "Process completion event emitter"
+intent: >
+  Publishes a CloudEvents 1.0-conformant event marking the completion
+  of one semantic analysis cycle, with the DMN-decided fields
+  (personal data risk, processing route, redaction level, human
+  validation status) attached. Personal data is NEVER included in
+  the emitted payload — only the deterministic classification fields.
+
+algorithm_kind: emitter
+
+io:
+  inputs:
+    - id: event_type
+      type: string
+      cardinality: single
+    - id: payload
+      type: object
+      cardinality: single
+  outputs:
+    - id: published
+      type: boolean
+
+implementation:
+  type: external
+  medium: mcp_tool
+  uri: "uapf-ip://capability/event.emit@1"
+  hash: "sha256:0000000000000000000000000000000000000000000000000000000000000000"
+  runtime:
+    capability: "event.emit@1"
+    cloud_events_spec: "1.0"
+
+determinism: deterministic
+side_effects: writes_state
+
+confidence:
+  type: none
+
+complexity:
+  typical_latency_ms: 25
+  max_latency_ms: 1000
+
+failure_mode: "throw — process must complete reliably or fail loudly."
+
+reference:
+  standard: "CloudEvents 1.0"
+  url: "https://github.com/cloudevents/spec/blob/v1.0/spec.md"
+
+owners:
+  - type: team
+    id: uapf-stewards
+    contact: stewards@uapf.dev
+
+lifecycle:
+  status: draft
+  since: "2026-05-20"
+
+audit:
+  log_inputs: full
+  log_outputs: full
+  retention: "1y"