GitHub Actions — schema validation on every PR

[caiovicentino]

PRs to the registry should automatically:

1. Validate each atlas/*/*.json against schema.json
2. Re-compute manifest_sha256 from content; fail if mismatch with declared sha
3. Confirm slug == manifest_sha256[:10]
4. Reject if HF dataset URL given but 404s

Gate auto-merge on green.