Implement canonical schema foundation

schemas/resource_manifest.schema.json

@@ -28,6 +28,11 @@
       "items": {"type": "string", "minLength": 1},
       "uniqueItems": true
     },
+    "caring_profile": {
+      "type": "string",
+      "description": "Optional CARING profile identifier used by resource-level descriptors.",
+      "const": "caring-0.4.0-rc2"
+    },
     "metadata": {
       "type": "object",
       "description": "Free-form provenance and contract metadata. Conventions: 'source' (origin description), 'flex_auth_contract' (contract version string, currently 'resource-registration-v0').",
@@ -76,6 +81,10 @@
           "description": "Owner identifier, conventionally 'team:<slug>' or 'user:<slug>'.",
           "minLength": 1
         },
+        "caring": {
+          "description": "Optional CARING descriptor for this resource. Policy packages may require this field for conformance checks.",
+          "$ref": "https://flex-auth.netkingdom/schemas/caring_access_descriptor.schema.json"
+        },
         "attributes": {
           "type": "object",
           "description": "Free-form attributes that policy packages may consult. Reserved keys may be defined by individual policy packages.",