- load_config now tries paperforge_lite.config.load_vault_config first,
falls back to legacy JSON parsing for pre-01-03 installs
- resolve_vault_for_validate checks PAPERFORGE_VAULT before VAULT_PATH
before cwd (matching the shared resolver's precedence)
- Preserves all existing validation checks