Oko enrichment

Oko enrichment — contract and behavior

• Lem can call the configured research service when local reading needs external context.
• Enrichment includes source attribution so a model summary is not confused with the paper's own text.
• A failed enrichment request does not block the local reader or mutate paper metadata.
• Research credentials and provider routing remain in the service boundary rather than the macOS bundle.