Composite GitHub Action for CTDL JSON-LD structural validation, so a consumer
can pin a tag that contains it.

Also fixes the sync gate, which ran only `uv sync --frozen` and therefore
could not fail on lockfile drift (CQ-09).

Verified at this tag: 179 tests, 94.83% coverage, ruff, mypy strict, pip-audit.