Fix contributor activity GraphQL batching

[rogerchappel]

Summary

• replace per-user REST profile/activity lookups with batched GraphQL user/profile/contribution queries
• update live snapshot method/caveats to reflect GraphQL contribution activity
• extend token-check --require-graphql-search to verify contributionsCollection access too

Validation

• pnpm run test
• git diff --check
• OSSRANK_GITHUB_TOKEN=*** node dist-cli/cli.js token-check --require-graphql-search

Note: a tiny live refresh smoke reached GitHub GraphQL successfully, but a full live refresh should be rerun in Actions with the updated classic PAT before merging generated data/deploying.