ocs_doc_api: fix review findings (scale/rotation/all-or-nothing/DoS/bounds/codegen)

CRITICAL:
- transform_entity_geometry: fix s^2 double-scale (axes already carry scale; drop
  the *s pre-multiply so 2D entities scale by s like solids), and handle rotation
  for direction/angle fields (apply_dir for Ray/XLine direction + Ellipse
  major_axis; offset Arc angles; compose Insert rotation).
- ensure_transformable: check layer-lock + resolve solid bodies (not just type),
  restoring TransformMany all-or-nothing; regression test with a locked layer.

WARNING:
- volume/centroid: memoize per (handle, geometry_epoch) + cap cold-cache
  tessellation budget (query-batch DoS).
- entity_to_profile_curves: fail Unsupported on polyline bulge (no silent
  chord-substituted sweep profile).
- Ellipse: validate minor_axis_ratio in (0,1] so bounds never under-bound.
- RasterImage bounds: bracket all four corners (rotated/flipped images).

SUGGESTION:
- binding_schema.json handles derived from spec families (includes ArcCurve/
  Ellipse/Spline/Ray/XLine).
- build.rs header: enums are hand-maintained (not 'GENERATED'); ops_gen/query_gen
  headers corrected to match.
- Dedupe divergence mesh_volume_centroid into the crate's geom module; host +
  both mocks delegate.

Tests: +3 regression tests (scale-once, rotation, locked-layer all-or-nothing)
-> 604 host lib green; 8 crate unit tests green.

crates/ocs_doc_api/src/gen/query_gen.rs

@@ -1,7 +1,7 @@
-// GENERATED by build.rs from spec/entities.toml — do NOT edit by hand.
-// Committed snapshot for reviewability (plan §10); build.rs regenerates and CI
-// fails on drift (`--check`). Append new variants at the END only (bincode
-// discriminant stability, plan §7).
+// HAND-MAINTAINED wire vocabulary (the Query enum). NOT derived from the spec by
+// build.rs — the enum is the canonical append-only wire vocabulary; the spec's
+// `query` names must each map to a variant here (enforced by a test). Append new
+// variants at the END only (bincode discriminant stability, plan §7).
 
 use serde::{Deserialize, Serialize};