Add Genesis bundle install fast path

[rita-aga]

Summary

• add Genesis registry bundle export endpoint for pinned app refs
• install/restart recovery now materializes bundles first and only allows Git fallback when TEMPER_GENESIS_INSTALL_GIT_FALLBACK=1
• use digest-aware reconcile for Genesis installs so already-installed apps are adopted/skipped
• restrict app WASM loading to manifest-declared modules and add timing logs

Verification

• cargo check -p temper-platform
• cargo test -p temper-platform bundle -- --nocapture
• cargo test -p temper-platform test_find_wasm_modules -- --nocapture
• git diff --check