P0: Enforce repo topology + dependency directionality

[mdheller]

Acceptance:

• docs/TOPOLOGY.md referenced from README
• A check exists for forbidden dependency direction (tritrpc -> sociosphere)
• Submodule update playbook documented