Immutable blueprint inputs

Blueprint authors can now mark inputs as immutable. Once a child service installation starts a Helm or Terraform apply, Ryvn records a lock for every immutable input it consumed and the blueprint installation edit page renders those inputs as read-only with an inline warning. API and YAML updates that try to change a locked value are rejected until no installation depends on it anymore.