TRACE-CTI: Auditable Post-Extraction Governance of TTP Claims with Knowledge Graphs