ADR-0024 Phase B: DDL commands without value literals

Migrate the five DDL commands at four entry words: drop (drop
table / drop column / drop relationship), add (add column /
add 1:n relationship), rename (rename column), change (change
column). The walker route now owns these end-to-end; chumsky
declarations remain unreachable for these inputs but stay
until Phase F.

Walker extensions:
- New node kinds: NumberLit (with optional content validator)
  and Literal(&str) (verbatim byte sequence with word-boundary
  lookahead — used for the `1` in `add 1:n …` so it surfaces
  as `\`1\`` in the expected-set, matching the existing
  parse_error_pedagogy contract).
- Flag (--name) terminal — Phase A stubbed; now wired to the
  walker driver with consume_flag() in lex_helpers.
- Repeated combinator with optional separator and `min` floor.
  Used by referential clauses (0..2 `on <delete|update>` runs)
  and change-column flags (0..N --force-conversion /
  --dont-convert; AST builder enforces mutual exclusion).
- Optional now propagates its inner's expectations as a
  `skipped` field on the Matched result. Seq accumulates these
  across children so the next failure's expected-set surfaces
  the full union — closes the keyword-completion regression
  (`add column ` must offer `to`, `table`, plus the table-name
  identifier slot).
- Expectation::Ident gained a `source: IdentSource` field; the
  parser-side bridge maps Tables/Columns/Relationships/Types
  to the IdentSlot::expected_label strings ("table name",
  "column name", …) so the existing completion engine's
  schema-cache lookup still resolves.
- Walker error wording now includes "after `<consumed>`,
  expected …" framing — matches the chumsky-side test
  contract for structural errors mid-shape.
- AST-builder validation errors now propagate as
  WalkOutcome::ValidationFailed (not the generic "AST builder
  failed" fallback), so `change column … --force-conversion
  --dont-convert` and repeated `on delete` clauses surface
  their friendly catalog wording verbatim.

Grammar additions:
- src/dsl/grammar/shared.rs: type-name validator (TYPE_VALIDATOR
  uses Type::from_str via parse.custom.unknown_type catalog),
  qualified_column sub-grammar, referential action keyword
  (`cascade`/`restrict`/`set null`/`no action`), repeated
  on-clauses.
- src/dsl/grammar/ddl.rs: drop/add/rename/change CommandNodes
  with inline shapes (per-use-site `role` annotations let the
  AST builder discriminate parent vs child columns, etc.).
  The four entry words each have one CommandNode whose `shape`
  is a Choice across sub-forms.

Tests:
- 14 new walker-specific tests covering all DDL forms (bare
  drop table, drop column with optional connectives, drop
  relationship by name and by endpoints, add column with type
  validator, rename column, change column with each flag form
  + mutual-exclusion check, add 1:n relationship minimal /
  full, repeated-clause-twice rejection).
- Total: 819 passed, 0 failed, 1 ignored (was 805 / 1).
- cargo clippy --all-targets -- -D warnings clean.

src/dsl/grammar/mod.rs

@@ -23,6 +23,8 @@
 //! value slots in Phase D.
 
 pub mod app;
+pub mod ddl;
+pub mod shared;
 
 use crate::dsl::command::Command;
 use crate::dsl::walker::context::WalkContext;
@@ -125,6 +127,10 @@ impl Word {
 /// on mismatch.
 pub type IdentValidator = fn(matched: &str) -> Result<(), ValidationError>;
 
+/// Content-level validator for a `NumberLit` slot. Same shape
+/// as `IdentValidator`; surfaces as `ValidationFailed` on Err.
+pub type NumberValidator = fn(matched: &str) -> Result<(), ValidationError>;
+
 #[derive(Debug, Clone, PartialEq, Eq)]
 pub struct ValidationError {
     pub message_key: &'static str,
@@ -160,13 +166,25 @@ pub enum Node {
         #[allow(dead_code)]
         highlight_override: Option<HighlightClass>,
     },
-    #[allow(dead_code)]
-    NumberLit,
+    /// A number literal. The optional `validator` runs against
+    /// the matched text (used by Phase D value slots to enforce
+    /// per-type integer/decimal rules).
+    NumberLit {
+        validator: Option<NumberValidator>,
+    },
+    /// A literal byte sequence at this position — matches
+    /// bytes verbatim (whitespace-skipped) with a lookahead so
+    /// `1` doesn't half-match `12` and `n` doesn't half-match
+    /// `name`. Used by Phase B's `add 1:n …` for the literal
+    /// `1`. Surfaces in the expected-set as `` `<literal>` ``,
+    /// matching chumsky's labelled-token rendering.
+    Literal(&'static str),
     #[allow(dead_code)]
     StringLit,
     #[allow(dead_code)]
     BlobLit,
-    #[allow(dead_code)]
+    /// A `--name` flag. Walker matches the flag shape and
+    /// asserts the name matches the expected literal.
     Flag(&'static str),
     /// A non-whitespace run consumed verbatim from source. Per
     /// ADR-0024's path-bearing-commands UX change, paths with
@@ -231,6 +249,10 @@ pub static REGISTRY: &[&CommandNode] = &[
     &app::IMPORT,
     &app::MODE,
     &app::MESSAGES,
+    &ddl::DROP,
+    &ddl::ADD,
+    &ddl::RENAME,
+    &ddl::CHANGE,
 ];
 
 /// Look up a `CommandNode` by entry word, case-insensitively.