codmap 0.0.8 — the manifest now describes the input the graph was built from

Schema unchanged (0.13). In git mode the input manifest enumerated the tracked set
while the extractor walked the filesystem, so a module that exists and has not been
`git add`ed — or one .gitignore excludes — was in the graph, absent from scope.files,
and moved scope_id not at all. Since scope_id is the cache key for --incremental and
the watch probe, --incremental answered "unchanged: 0 module(s) recomputed" over a
file that had just grown a new symbol.

Enumeration now adds `git ls-files --others --exclude-standard`; membership is checked
rather than trusted, with gitignored files named rather than adopted; the result rides
in provenance.inputs.

Verified from PyPI, outside any checkout, against the scenario the release exists for:
the untracked module enters the manifest with tracked: false, scope_id moves, and
--incremental recomputes it. A clean tree resolves to the identical scope_id under
0.0.7 and 0.0.8, so no pinned identity moves.