chore(root): converge the root allowlist with the AsciiDoc migration and the www/ bundle (#53)

`scripts/check-root-shape.sh` — run as a required step by
`estate-rules.yml` — was failing on this repository. Two causes, both
fixed by **additions to the allowlist only**:

1. **The `www/` directory.** The estate-wide `.well-known` migration
moved the site bundle to `www/.well-known/`, creating a tracked `www/`
at the root. The allowlist was never updated, so the checker flagged it
as drift. Entry copied verbatim from `rsr-template-repo`, which
allowlists `www/` for exactly this reason (issue #53).

2. **AsciiDoc files.** The allowlist names `CHANGELOG.md` /
`CONTRIBUTING.md` / `SECURITY.md` etc. while the real `.adoc` files sit
unlisted at the root. Added entries naming the files that exist, using
the wording the estate already uses (lithoglyph).

**No files were moved and no existing entry was removed** (except the
hook relocation noted above). Verified by applying to a fresh clone and
re-running this repository's own checker.

Author: hyperpolymath

.machine_readable/root-allow.txt

@@ -20,10 +20,12 @@ AFFIRMATION.adoc           # dated/signed honesty snapshot (README/EXPLAINME/AFF
 GOVERNANCE.adoc            # governance model (validator accepts root or docs/governance/)
 MAINTAINERS.adoc           # maintainer roster
 CONTRIBUTING.md            # REQUIRED AT ROOT by scorecard-enforcer/openssf-compliance/quality CI (test -f, no .github fallback). The fuller copy in .github/ is GitHub's auto-discovery convention; dedupe is an owner decision (would need those CI checks updated to accept .github/).
+CONTRIBUTING.adoc          # Current contributor guide after the AsciiDoc migration.
 SECURITY.md                # REQUIRED AT ROOT by scorecard-enforcer CI + the security-policy contractile (test -f SECURITY.md). See CONTRIBUTING.md note re: the .github/ copy.
 LICENSE
 LICENSES/                  # REUSE licence texts (MPL-2.0.txt + CC-BY-SA-4.0.txt) for the dual-licence model (code MPL-2.0 / docs CC-BY-SA-4.0)
 CHANGELOG.md
+CHANGELOG.adoc             # Current changelog after the AsciiDoc migration.
 CITATION.cff               # citation metadata (surfaced at root by #96)
 
 # ─── Build entry points (must live at root for their tooling) ────────────────
@@ -45,6 +47,7 @@ sonar-project.properties   # SonarCloud analysis config; the SonarQube scan acti
 .devcontainer/             # VS Code dev container spec; tool-required at root
 .git/
 .github/                   # CONTRIBUTING.md, CODE_OF_CONDUCT.md, SECURITY.md, workflows/
+www/                       # site-operations bundle; canonical .well-known/ lives at www/.well-known/ (issue #53)
 .machine_readable/         # AI manifests, contractiles, custom-format configs
 .well-known/
 build/                     # contractile.just, setup.sh, guix.scm, .guix-channel, Containerfile