Run governed enrichment over a query's surfaced nodes

Execute a Cypher query, detect declared-but-null property gaps on the surfaced nodes, fill each with a single LLM call, and quarantine the result under _enrichment with provenance. Honest-decline: an UNKNOWN answer writes nothing. Promotion into the live property happens only at /api/verify.