Hold a refused manifest in the bus reader instead of ending the whole read (ADR 0578 §3)

Issue 1585, S2: one refused manifest silenced disk-load for 45 hours. frombus decodes leniently, takes the
indexer's verdict, stands a refused module in as its stub and names it in Input.Refused; DataItemsHeld names it.

Claude-Session: https://claude.ai/code/session_01NcbgfJ9Gum47zkFKWRaovL

go/compose/input.go

@@ -101,6 +101,15 @@ type Input struct {
 	// declaration carries to a node-engine that reads them.
 	CurrentBuilds map[string]string
 	BuildIDs      map[string]map[string]string
+
+	// Refused is each module whose manifest the indexer's judge refused, or whose bytes do not decode, by module, with why
+	// (novox/hq ADR 0578 §3, §5): its verdict, carried in the plain input. Such a module stands in Catalogue as its stub
+	// (compose.Stub), so it is held: nothing of its own is composed, while what it provides and requires still shapes the
+	// rest. A module not named is accepted, a missing verdict included.
+	Refused map[string]string `json:",omitempty"`
+	// SetAside is each module whose manifest has a field the reader's decoder does not know, by module, with what was set
+	// aside (catalogue.Manifest.SetAside): the rest of it is composed, and the reader names it (ADR 0578 §6).
+	SetAside map[string]string `json:",omitempty"`
 }
 
 // Issued is one pair credential made for a consumer of a provider (inv.Secret): ForProvider is its copy sealed to the