feat(core-eslint): add no-undeclared-consent-check rule (conformance gate 12)

Extends the conformance ESLint layer with the consent-check rule:

- `no-undeclared-consent-check` (warn): `consent.isGranted("X")` in a
  use-case file must match a category declared in `manifest.requiresConsent`;
  also warns when requiresConsent is declared but no isGranted call is found.
- `_manifest-ast.js`: adds `parseManifestFully` which extracts top-level
  `name`, `requiredCores`, `requiresConsent`, and per-use-case maps from the
  manifest AST; `requiresConsent` extraction tested in `_manifest-ast.test.js`.
- `_rule-context.js` / `_rule-schema.js`: shared helpers extracted from the
  existing per-rule files so the new rule can resolve use-case name + feature
  root without duplication.
- Existing rules (`no-undeclared-audit`, `no-undeclared-event-publish`,
  `no-undeclared-analytics-event`) updated to use the shared helpers.
- `plugin.js` + `base.js` register the rule at warn severity.
- CLAUDE.md + conformance-quickref.md: rule count advanced from 11 → 12.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

packages/core-eslint/rules/no-undeclared-audit.js

@@ -1,6 +1,7 @@
 import { parseManifestUseCases } from "./_manifest-ast.js";
-import { useCaseNameFromFile } from "./_usecase-name.js";
-import { manifestPathForFeature, featureRootForFile } from "./_manifest-source.js";
+import { manifestPathForFeature } from "./_manifest-source.js";
+import { repoRootSchema } from "./_rule-schema.js";
+import { resolveRuleContext } from "./_rule-context.js";
 
 /** @type {import("eslint").Rule.RuleModule} */
 export default {
@@ -8,28 +9,18 @@ export default {
     type: "problem",
     docs: {
       description:
-        "auditLog.record({ type: \"X\" }) inside a use-case factory must declare X in manifest.useCases[name].audits.",
+        'auditLog.record({ type: "X" }) inside a use-case factory must declare X in manifest.useCases[name].audits.',
     },
-    schema: [
-      {
-        type: "object",
-        properties: { repoRoot: { type: "string" } },
-        additionalProperties: false,
-      },
-    ],
+    schema: repoRootSchema,
     messages: {
       undeclared:
-        "{{useCase}} calls auditLog.record with type \"{{event}}\" but {{event}} is not declared in manifest.useCases.{{useCase}}.audits. Add it to the manifest or remove the call.",
+        '{{useCase}} calls auditLog.record with type "{{event}}" but {{event}} is not declared in manifest.useCases.{{useCase}}.audits. Add it to the manifest or remove the call.',
     },
   },
   create(context) {
-    const opts = context.options[0] ?? {};
-    const repoRoot = opts.repoRoot ?? context.cwd ?? process.cwd();
-    const filename = context.filename;
-    const useCaseName = useCaseNameFromFile(filename);
-    if (!useCaseName) return {};
-    const featureRoot = featureRootForFile(filename, repoRoot);
-    if (!featureRoot) return {};
+    const rc = resolveRuleContext(context);
+    if (!rc) return {};
+    const { useCaseName, featureRoot } = rc;
     const manifest = parseManifestUseCases(manifestPathForFeature(featureRoot));
     if (!manifest || !manifest[useCaseName]) return {};
     const declared = new Set(manifest[useCaseName].audits);
@@ -57,7 +48,11 @@ export default {
           ) {
             const event = typeProp.value.value;
             if (!declared.has(event)) {
-              context.report({ node, messageId: "undeclared", data: { event, useCase: useCaseName } });
+              context.report({
+                node,
+                messageId: "undeclared",
+                data: { event, useCase: useCaseName },
+              });
             }
           }
         }