refactor(root): move root artefacts to their canonical locations (#384)

refactor(root): move root artefacts to their canonical locations

Applies the estate root-shape rollout: files that are not root-level by
necessity move to where their tooling and the estate canon expect them,
with
every reference updated in the same change.

Committed through the git index rather than a worktree: this repository
carries
very large training-data blobs whose checkout exceeds the runner's
writable
space, so the change is applied with `git apply --cached` and written
with
`git write-tree`.

Author: hyperpolymath

.githooks/pre-commit .github/hooks/pre-commit.githooks/pre-commit renamed to .github/hooks/pre-commit

@@ -48,7 +48,7 @@ jobs:
 
       - name: Validate A2ML manifests
         if: steps.detect.outputs.count > 0
-        run: bash .githooks/validate-a2ml.sh
+        run: bash .github/hooks/validate-a2ml.sh
       - name: Write summary
         run: |
           A2ML_COUNT="${{ steps.detect.outputs.count }}"
@@ -93,7 +93,7 @@ jobs:
 
       - name: Validate K9 contracts
         if: steps.detect.outputs.k9_count > 0
-        run: bash .githooks/validate-k9.sh
+        run: bash .github/hooks/validate-k9.sh
       - name: Write summary
         run: |
           K9_COUNT="${{ steps.detect.outputs.k9_count }}"

.githooks/validate-a2ml.sh .github/hooks/validate-a2ml.sh.githooks/validate-a2ml.sh renamed to .github/hooks/validate-a2ml.sh

@@ -1,2 +1,3 @@
 .hypatia-ignore
 CLAUDE.md
+build/                     # build orchestration: guix.scm relocated here (canon 1.2.1 guix-primary template_ref = "build/")

.githooks/validate-k9.sh .github/hooks/validate-k9.sh.githooks/validate-k9.sh renamed to .github/hooks/validate-k9.sh

@@ -22,7 +22,7 @@ Files: src/*
  verification/*
  scripts/*
  hooks/*
- .githooks/*
+ .github/hooks/*
  tests/*
  meta-checker/*
  HOL-o-extension/*

.github/workflows/dogfood-gate.yml

@@ -1,7 +1,7 @@
 ;; SPDX-License-Identifier: AGPL-3.0-or-later
 ;; echidna - Guix Package Definition
-;; Development: guix shell -D -f guix.scm
-;; Build: guix build -f guix.scm
+;; Development: guix shell -D -f build/guix.scm
+;; Build: guix build -f build/guix.scm
 
 (use-modules (guix packages)
              (guix gexp)

.machine_readable/root-allow.txt

@@ -35,7 +35,7 @@ git init
 sed -i 's/RSR-template-repo/my-project/g' Justfile guix.scm README.adoc
 
 # Enter development environment
-guix shell -D -f guix.scm
+guix shell -D -f build/guix.scm
 
 # Validate compliance
 just validate-rsr