Why Vector RAG Answers Only Half of a Legal Question: Building a GraphRAG Agent That Follows the Law's Cross-References, in 5 Steps