Release Compass 0.3.23

[forhappy]

Summary

• Bump the Compass workspace and CLI crates from 0.3.22 to 0.3.23 from the clean origin/main base (403c81c647cc65ff878beb6cc6d0c17d15b355c0).
• Update the VS Code extension metadata and qualification producer version to 0.3.23.
• Move the accumulated user-visible changes into the dated 0.3.23 changelog section while keeping an empty Unreleased section for follow-up work.

Validation

• cargo metadata --no-deps --format-version 1
• cargo check --workspace --all-targets --locked
• cargo fmt --all -- --check
• cargo clippy --workspace --lib --bins --locked -- -D warnings
• cargo test --workspace --lib --bins --locked
• cargo test -p compass-cli --test compass_product --locked
• sh scripts/check_product_boundary.sh
• sh scripts/test_release_scripts.sh
• ./scripts/qualify_code_graph_v1.sh --fixtures-only
• npm run typecheck:js
• npm run test:js (143 viewer tests and 88 browser tests)
• node scripts/check_viewer_assets.mjs

Release

After this PR is merged, create the annotated compass-v0.3.23 tag on the merge commit so the existing GitHub release workflow can build the Linux, macOS, and Windows archives, checksums, installers, and release manifest. Curated release notes will be published after the workflow completes.