Take the catalogue's composition rules into the node-engine

ADR 0593 §7: the composer with its refusals leaves mesh-sdk, so mesh-sdk
carries no composition rule. The catalogue functions only the
node-engine's composition reaches (Resolve, Resolution's Compose,
Declaration, DataItems, LeftOut, Rules and the rest, the settings,
placeholder and template refusals, the rendering helpers) are copied
with their tests into internal/compose/resolution; a method of a
mesh-sdk shape becomes a function taking it first. The composition
calls its own copies, and the captured catalogue its tests read lives
here now, shared by mesh-compose's tests.

Claude-Session: https://claude.ai/code/session_01NcbgfJ9Gum47zkFKWRaovL

testdata/beside/mesh-catalog/modules/ssh-client/files/config

@@ -0,0 +1,6 @@
+# The mesh's region (module ssh-client, novox/hq research 027/03). It comes first because ssh
+# takes the first value it finds for each option. It brings in ~/.ssh/config.d/ in name order:
+# 00-mesh, the mesh's Host per machine, then each file another module places there. Replaced at
+# every push. Everything below it is yours, kept as you wrote it, and applies to every host the
+# files above leave unsettled.
+Include ~/.ssh/config.d/*

testdata/beside/mesh-catalog/modules/ssh-client/files/forge

@@ -0,0 +1,7 @@
+Host ${bound:forge-account:ssh_alias}
+  HostName ${bound:forge-account:ssh_host}
+  Port ${bound:forge-account:ssh_port}
+  HostKeyAlias ${bound:forge-account:ssh_alias}
+  User git
+  IdentityFile ~/.ssh/mesh_ed25519
+  IdentitiesOnly yes

testdata/beside/mesh-catalog/modules/ssh-client/files/gitconfig

@@ -0,0 +1,2 @@
+[url "ssh://${bound:forge-account:ssh_alias}/"]
+	insteadOf = ${bound:forge-account:https_base}

testdata/beside/mesh-catalog/modules/ssh-client/files/known_hosts

@@ -0,0 +1 @@
+${bound:forge-account:ssh_alias} ${bound:forge-account:host_key}