mindspace: version runtime contracts and audit packages

mindspace-service/mindspace-rpc-server.test.mjs

@@ -320,6 +320,11 @@ test('health and contract endpoints are exposed without auth', async () => {
     env: {
       MINDSPACE_MEMIND_ROOT: '..',
     },
+    serviceMeta: {
+      buildId: 'mindspace-test-build',
+      gitSha: 'abc123',
+      builtAt: '2026-07-27T00:00:00.000Z',
+    },
   });
 
   const health = await runRequest(handler, { path: '/health' });
@@ -327,7 +332,23 @@ test('health and contract endpoints are exposed without auth', async () => {
 
   assert.equal(health.statusCode, 200);
   assert.equal(health.body.ok, true);
+  assert.equal(health.body.contractVersion, 2);
+  assert.equal(health.body.buildId, 'mindspace-test-build');
   assert.equal(contract.statusCode, 200);
+  assert.equal(contract.body.contractVersion, 2);
+  assert.equal(contract.body.service, 'mindspace-service');
+  assert.equal(contract.body.buildId, 'mindspace-test-build');
+  assert.equal(contract.body.gitSha, 'abc123');
+  assert.ok(
+    contract.body.requiredCapabilities.includes(
+      'workspace-publication-delivery-authority',
+    ),
+  );
+  assert.ok(
+    contract.body.requiredBindings.workspaceToolService.includes(
+      'publishPage',
+    ),
+  );
   assert.ok(contract.body.bindings.assetService.includes('renderAssetPreview'));
   assert.ok(
     contract.body.bindings.chatSaveService.includes(