Consume polyfill-surface, and declare what this package relies on

Pulls @ng-eventually/polyfill's engagement, version-pinned, and declares
back what this package actually consumes — the contract pair that lets the
two repositories coordinate without either reading the other's source.

The declaration is the channel: its Frictions and Needs are standing
requests the provider drains. The one that decides this package's shape:
modifying and removing a record have no published path that is both
shape-typed and awaitable, so Refine's update and deleteOne have nowhere
to land. Reading, creating and both live channels do have one.

The engagement describes 1.0.0-dev.14 and no tag carries it, so the pin is
the branch it is authored on and `against:` is the commit it resolved to.

.gitignore

@@ -3,3 +3,9 @@ dist
 .parcel-cache
 .npmrc
 *.log
+
+# per-developer contract access map
+.project/contracts.local.yaml
+
+# per-machine hook wiring (absolute paths)
+.claude/settings.local.json