docs: use HIG token roles from @bloxwap/hig-tokens/css; delete hig-roles.generated.css

[joeblau]

Follow-up to bloxwap/hig#66 (via bloxwap/hig#75). Chart no longer generates HIG roles.

• apps/docs/styles/hig-roles.generated.css is deleted, along with the generator in scripts/hig-tokens.mjs. @bloxwap/hig-tokens/css now emits the roles itself.
• app/global.css uses the package names:
  • --hig-duration-* → --hig-motion-duration-*
  • --hig-control-<mode> → --hig-density-<mode>-control
  • --hig-type-<role>-line → --hig-type-<role>-line-height
  • Radius and type size/weight names are unchanged.
• hig-tokens.mjs --check now asserts that the package CSS defines the roles, and it forbids a local styles/ role layer.
• Re-vendors HIG candidate 0.1.0-candidate.shad7ff4780 from bloxwap/hig@d7ff478 and updates provenance.json hashes, the README and the lock.
• The tokens tarball goes from 4,428,734 B to 8,110 B because the native TTFs left it (Move native TTFs out of the web @bloxwap/hig-tokens package hig#64). The OG card renderer now reads Bloxwap Sans Bold/Black from the new build-time-only @bloxwap/hig-native-fonts tarball. The fonts are never served and the bytes are identical.

Proof (Node 24.22.0, npm 11.21.1, NEXT_PUBLIC_BASE_PATH=/chart)

Command	Result
npm run lint	icon lint clean; "HIG 0.1.0-candidate.shad7ff4780 tarball provenance, installed versions, token roles and copy drift checks passed."
npm run docs:build	pass; "Static export verified: 30 HTML pages, 1530 local links/assets, 25 social cards"
npm run docs:check	pass
npm run docs:test (Playwright Chrome; checks the --hig-motion-duration-fast reduced-motion value)	pass

No publish, tag, release or deploy.

🤖 Generated with Claude Code