fix(v0.7.43): attach evidence references to remote read items

[qiansc]

Summary

• Upgrade the repository evidence plugin to ABI 2 with item-scoped text attachments and compact references.
• Preserve original content, repeated read identity, diagnostics and source-verification boundaries.
• Adapt query guidance to bounded default reads, file-only search and per-file match limits; retain local/offline paths.
• Bump the release packages and plugin projections to 0.7.43.

Validation

• Full workspace build and release:prepare passed.
• CLI typecheck and lint passed (existing warnings only).
• Node Wasm contract tests: 21 passed.
• Evidence installer tests: 7 passed.
• No new internal business identifiers in the diff.
• Full workspace tests are not claimed as locally run; release CI remains enabled.