Catalogue imports

Dry-run validation reads CSV/XLSX without evaluating formulas, rejects macros, and checks schema, references, serial overlap, supersession cycles and source evidence — before anything is published.