Source cross-reactivity guidance from SCRATCH

[monchee]

Summary

• consume SCRATCH schema 1.1 and pin its cross-reactivity governance and six ordered records
• remove DREAM's hardcoded clinical copy and render directly from the pinned snapshot
• fail loudly on malformed cross-reactivity or sign-off metadata
• show the source's explicit pending-review state without inventing a reviewer or date

No drug record, dose, dilution, concentration, ratio, volume, or protocol position changed.

Verification

• exact DREAM/SCRATCH equality for all six drug records and six cross-reactivity records
• node scripts/verify-order.mjs (116 positions, 0 mismatches)
• npx tsc --noEmit
• npm run lint
• focused tests (27 passed)
• npm run test:coverage (95 files, 793 tests)
• npm run build
• bundled exact clinical sentinel strings and pending-review notice confirmed
• git diff --check