feat: add Phase 1 constraint solver addon, move prior content to GNN/

- Move existing OndselSolver, GNN ML layer, and tooling into GNN/
  directory for integration in later phases
- Add Create addon scaffold: package.xml, Init.py
- Add expression DAG with eval, symbolic diff, simplification
- Add parameter table with fixed/free variable tracking
- Add quaternion rotation as polynomial Expr trees
- Add RigidBody entity (7 DOF: position + unit quaternion)
- Add constraint classes: Coincident, DistancePointPoint, Fixed
- Add Newton-Raphson solver with symbolic Jacobian + numpy lstsq
- Add pre-solve passes: substitution + single-equation
- Add DOF counting via Jacobian SVD rank
- Add KindredSolver IKCSolver bridge for kcsolve integration
- Add 82 unit tests covering all modules

Registers as 'kindred' solver via kcsolve.register_solver() when
loaded by Create's addon_loader.

GNN/.gitea/workflows/ci.yaml

@@ -2,9 +2,9 @@ name: CI
 
 on:
   push:
-    branches: [main, public]
+    branches: [main]
   pull_request:
-    branches: [main, public]
+    branches: [main]
   workflow_dispatch:
     inputs:
       run_datagen:
@@ -37,14 +37,14 @@ jobs:
     env:
       PATH: /tmp/solver-venv/bin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin
     steps:
-      - name: Checkout
+      - name: Trust internal CA
         run: |
-          git config --global --add safe.directory "$GITHUB_WORKSPACE"
+          curl -sk https://ipa.kindred.internal/ipa/config/ca.crt \
-          git clone --depth 1 --branch "${GITHUB_REF_NAME}" \
+            -o /usr/local/share/ca-certificates/kindred-internal.crt
-            "${GITHUB_SERVER_URL}/${GITHUB_REPOSITORY}.git" "$GITHUB_WORKSPACE" \
+          update-ca-certificates
-            || git clone --depth 1 "${GITHUB_SERVER_URL}/${GITHUB_REPOSITORY}.git" "$GITHUB_WORKSPACE"
+
-          cd "$GITHUB_WORKSPACE"
+      - name: Checkout
-          git checkout "$GITHUB_SHA" 2>/dev/null || true
+        uses: https://github.com/actions/checkout@v4
 
       - name: Set up venv
         run: python3 -m venv $VIRTUAL_ENV
@@ -66,23 +66,24 @@ jobs:
     env:
       PATH: /tmp/solver-venv/bin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin
     steps:
-      - name: Checkout
+      - name: Trust internal CA
         run: |
-          git config --global --add safe.directory "$GITHUB_WORKSPACE"
+          curl -sk https://ipa.kindred.internal/ipa/config/ca.crt \
-          git clone --depth 1 --branch "${GITHUB_REF_NAME}" \
+            -o /usr/local/share/ca-certificates/kindred-internal.crt
-            "${GITHUB_SERVER_URL}/${GITHUB_REPOSITORY}.git" "$GITHUB_WORKSPACE" \
+          update-ca-certificates
-            || git clone --depth 1 "${GITHUB_SERVER_URL}/${GITHUB_REPOSITORY}.git" "$GITHUB_WORKSPACE"
+
-          cd "$GITHUB_WORKSPACE"
+      - name: Checkout
-          git checkout "$GITHUB_SHA" 2>/dev/null || true
+        uses: https://github.com/actions/checkout@v4
 
       - name: Set up venv
         run: python3 -m venv $VIRTUAL_ENV
 
       - name: Install dependencies
         run: |
-          pip install --cache-dir $PIP_CACHE_DIR torch --index-url $TORCH_INDEX
+          pip install --cache-dir $PIP_CACHE_DIR \
+            mypy numpy scipy \
+            torch --index-url $TORCH_INDEX
           pip install --cache-dir $PIP_CACHE_DIR torch-geometric
-          pip install --cache-dir $PIP_CACHE_DIR mypy numpy scipy
           pip install --cache-dir $PIP_CACHE_DIR -e ".[dev]"
 
       - name: Mypy
@@ -96,21 +97,22 @@ jobs:
     env:
       PATH: /tmp/solver-venv/bin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin
     steps:
-      - name: Checkout
+      - name: Trust internal CA
         run: |
-          git config --global --add safe.directory "$GITHUB_WORKSPACE"
+          curl -sk https://ipa.kindred.internal/ipa/config/ca.crt \
-          git clone --depth 1 --branch "${GITHUB_REF_NAME}" \
+            -o /usr/local/share/ca-certificates/kindred-internal.crt
-            "${GITHUB_SERVER_URL}/${GITHUB_REPOSITORY}.git" "$GITHUB_WORKSPACE" \
+          update-ca-certificates
-            || git clone --depth 1 "${GITHUB_SERVER_URL}/${GITHUB_REPOSITORY}.git" "$GITHUB_WORKSPACE"
+
-          cd "$GITHUB_WORKSPACE"
+      - name: Checkout
-          git checkout "$GITHUB_SHA" 2>/dev/null || true
+        uses: https://github.com/actions/checkout@v4
 
       - name: Set up venv
         run: python3 -m venv $VIRTUAL_ENV
 
       - name: Install dependencies
         run: |
-          pip install --cache-dir $PIP_CACHE_DIR torch --index-url $TORCH_INDEX
+          pip install --cache-dir $PIP_CACHE_DIR \
+            torch --index-url $TORCH_INDEX
           pip install --cache-dir $PIP_CACHE_DIR torch-geometric
           pip install --cache-dir $PIP_CACHE_DIR -e ".[train,dev]"
 
@@ -118,35 +120,45 @@ jobs:
         run: pytest tests/ freecad/tests/ -v --tb=short
 
   # ---------------------------------------------------------------------------
-  # Dataset generation — manual trigger or on main/public push
+  # Dataset generation — manual trigger or on main push
   # ---------------------------------------------------------------------------
   datagen:
     runs-on: ubuntu-latest
     if: >-
       (github.event_name == 'workflow_dispatch' && inputs.run_datagen == true) ||
-      (github.event_name == 'push' && (github.ref == 'refs/heads/main' || github.ref == 'refs/heads/public'))
+      (github.event_name == 'push' && github.ref == 'refs/heads/main')
     needs: [test]
     env:
       PATH: /tmp/solver-venv/bin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin
     steps:
-      - name: Checkout
+      - name: Trust internal CA
         run: |
-          git config --global --add safe.directory "$GITHUB_WORKSPACE"
+          curl -sk https://ipa.kindred.internal/ipa/config/ca.crt \
-          git clone --depth 1 --branch "${GITHUB_REF_NAME}" \
+            -o /usr/local/share/ca-certificates/kindred-internal.crt
-            "${GITHUB_SERVER_URL}/${GITHUB_REPOSITORY}.git" "$GITHUB_WORKSPACE" \
+          update-ca-certificates
-            || git clone --depth 1 "${GITHUB_SERVER_URL}/${GITHUB_REPOSITORY}.git" "$GITHUB_WORKSPACE"
+
-          cd "$GITHUB_WORKSPACE"
+      - name: Checkout
-          git checkout "$GITHUB_SHA" 2>/dev/null || true
+        uses: https://github.com/actions/checkout@v4
 
       - name: Set up venv
         run: python3 -m venv $VIRTUAL_ENV
 
       - name: Install dependencies
         run: |
-          pip install --cache-dir $PIP_CACHE_DIR torch --index-url $TORCH_INDEX
+          pip install --cache-dir $PIP_CACHE_DIR \
+            torch --index-url $TORCH_INDEX
           pip install --cache-dir $PIP_CACHE_DIR torch-geometric
           pip install --cache-dir $PIP_CACHE_DIR -e ".[train]"
 
+      - name: Restore datagen checkpoint
+        id: datagen-cache
+        uses: https://github.com/actions/cache/restore@v4
+        with:
+          path: data/synthetic
+          key: datagen-${{ github.sha }}
+          restore-keys: |
+            datagen-
+
       - name: Generate dataset
         run: |
           NUM=${INPUTS_NUM_ASSEMBLIES:-100000}
@@ -160,6 +172,23 @@ jobs:
           INPUTS_NUM_ASSEMBLIES: ${{ inputs.num_assemblies }}
           INPUTS_NUM_WORKERS: ${{ inputs.num_workers }}
 
+      - name: Save datagen checkpoint
+        if: always()
+        uses: https://github.com/actions/cache/save@v4
+        with:
+          path: data/synthetic
+          key: datagen-${{ github.sha }}
+
+      - name: Upload dataset
+        uses: https://github.com/actions/upload-artifact@v3
+        with:
+          name: synthetic-dataset
+          path: |
+            data/synthetic/index.json
+            data/synthetic/stats.json
+            data/synthetic/shards/
+          retention-days: 90
+
       - name: Print summary
         if: always()
         run: |