[B5] External apps still use local workspace links

[snowzane]

Current Finding

Public Shijing package evidence still uses local link: dependencies to sibling nimi packages, and repository package relationships still rely on workspace-local package flow. This is not external package consumption proof.

Closure Evidence

• Public app package manifest consuming published SDK/Kit/app-tools versions or an explicitly documented local-only development lane.
• Install/build proof from a clean checkout without sibling nimi dependency links.
• Public release notes that distinguish local development from external app author consumption.

Automation Boundary

Automation may update Evidence Status. Automation must not close this issue.

Decision Gate

Human review is required before Closed.