Local reference validation

Resolves extracted document references and classifies missing or unsafe local targets.

The checker uses this internal layer to evaluate filesystem evidence consistently. It keeps path validation separate from Markdown discovery and parsing.