Add strict named pass resource bindings and output validation

Problem

SGProcessingManager currently loads one model and one input and maps processor outputs to declared outputs by position. When output counts do not match, the save path falls back to buffer zero. Output validation is empty.

This is unsafe for multi-input inference, general compute, Vulkan rendering, and GCS pipelines where buffers, textures, tensors, token streams, and structured artifacts must bind to exact names.

Scope

• Resolve pass inputs and outputs by declared binding name or stable resource ID.
• Support multiple inputs and outputs without positional fallback.
• Validate resource type, format, shape, dimensions, mutability, and required/optional status.
• Distinguish global job inputs, pass-local intermediates, and final job outputs.
• Require every enabled pass input to resolve to one compatible producer or job input.
• Require processor results to identify outputs by declared binding.
• Validate final output destinations and formats before execution.
• Add explicit conversion stages where compatible formats differ; never convert silently.
• Remove the fallback that maps unmatched outputs to bufferData[0].

Acceptance criteria

• Named multi-input and multi-output jobs bind the intended resources regardless of declaration order.
• Missing, duplicate, or incompatible bindings fail before processing starts.
• Processor output count mismatches return an error rather than duplicating the first buffer.
• Tests cover tensors, buffers, textures, strings/tokens, and image outputs.

Supports issues #7 and #9 and depends on issue #8.

Base implementation and review work on the branch consumed by SuperGenius/develop.