feat(scripts): extend revert/verify vocabulary + node-level AST API

[pyramation]

Summary

Extends @pgsql/scripts in three directions, keeping the never-guess contract (un-derivable → -- revert not derivable: <reason> + warning; inverses are AST-built and deparsed, never string-templated; reverse topo order):

1. Easy-win vocabulary — matviews/CTAS, FDW family (server/foreign table/user mapping), collation/aggregate/binary operator/cast, publication/subscription/statistics/event trigger/rule, ATTACH PARTITION → DETACH PARTITION, ALTER DEFAULT PRIVILEGES GRANT → REVOKE, SECURITY LABEL → IS NULL, plus a pg_enum verify for ADD VALUE (no revert — Postgres has no DROP VALUE).

2. Stateless groups — inverses that need no prior state because the statement carries both sides:

• RenameStmt / AlterObjectSchemaStmt: swap old/new name (or schema) — tables, columns, indexes, sequences, views, types, functions, schemas. SET SCHEMA on an unqualified name warns (original schema unknown).
• GRANT ALL: revert stays REVOKE ALL; verify expands to the object type's concrete privilege list (ALL_PRIVILEGES per objtype; sequences now use has_sequence_privilege).
• Long-tail creates: FDW, conversion, access method, transform, operator class/family, text search configuration/dictionary/parser/template, tablespace → matching DROP + catalog existence checks (pg_foreign_data_wrapper, pg_conversion, pg_am, pg_transform, pg_opclass/pg_opfamily, pg_ts_*, pg_tablespace).

3. Node-level API — the per-statement layer under revertFor/verifyFor, for consumers that compose inverses at the AST level (semantic diff driver, bundle reconcile, migration gen) without round-tripping through deparsed text:

invertStatement(facts: StatementFacts): Node[] | null  // wrapped stmt nodes, [] = nothing to revert, null = not derivable
existenceCheck(facts: StatementFacts): Node[] | null   // SelectStmt check nodes, [] = nothing to check, null = not derivable

Both return null instead of guessing — including partially underivable multi-command ALTER TABLEs (no silent partial inverses). revertFor/verifyFor remain the text-level conveniences on top.

Two deparser fixes surfaced by round-tripping the generated inverses: ALTER TYPE/DOMAIN ... RENAME now dot-joins qualified names (was comma-joining the List), and GRANT/REVOKE ... ON SEQUENCE now emits the SEQUENCE keyword.

87 exact-output tests; SUPPORTED_STATEMENTS/README updated. Part of the Phase 4 follow-up (constructive-planning#1329).

Link to Devin session: https://app.devin.ai/sessions/7f032c8e1bf245eeac2def99fdcc1623
Requested by: @pyramation

[devin-ai-integration]

🤖 Devin AI Engineer

I'll be helping with this pull request! Here's what you should know:

✅ I will automatically:

• Address comments on this PR. Add '(aside)' to your comment to have me ignore it.
• Look at CI failures and help fix them

Note: I can only respond to comments from users who have write access to this repository.

⚙️ Control Options:

• Disable automatic comment, CI, and merge conflict monitoring