Complete ops-hub Inter-Hub bootstrap and close bootstrap workplans.

Extract bootstrap logic into src/ops_hub/bootstrap.py with dry-run support,
public hub discovery, and unit tests. Update the gate probe to accept public
hub listing (200 or 401), document dev commands and architecture, and archive
finished OPS-WP-0001 and OPS-WP-0002 workplans.

.claude/rules/architecture.md

@@ -1,7 +1,28 @@
 ## Architecture
 
-<!-- TODO: Describe the key design decisions and component structure.
-     Key modules, data flows, external integrations, state machines, etc. -->
+`ops-hub` is a Python tooling repo that extends Inter-Hub with VSM Operations
+(System 1) vocabulary, bootstrap clients, and gate probes. Inter-Hub remains the
+generic hub substrate; this repo owns domain-specific seeds, scripts, and library
+code.
+
+### Components
+
+| Path | Role |
+| --- | --- |
+| `src/ops_hub/interhub_gate_probe.py` | Public gate probe for bootstrap API surface |
+| `src/ops_hub/bootstrap.py` | Authenticated bootstrap client (plan, dry-run, execute) |
+| `scripts/interhub-gate-probe.py` | CLI wrapper for gate probe |
+| `scripts/ops-hub-bootstrap-api.py` | CLI wrapper for bootstrap |
+| `seeds/` | Manifest, widget, and SQL bootstrap artifacts |
+| `docs/` | Runbook, readiness gates, inventory handoff |
+| `workplans/` | ADR-001 work source of truth |
+
+### External integrations
+
+- **Inter-Hub** (`https://hub.coulomb.social`) — hub rows, manifests, widgets, events
+- **State Hub** — workstream/task cache rebuilt from workplan files
+- **OpenBao** — operator and runtime API key custody (`warden access --exec`)
+- **ops-warden** — SSH cert issuance and credential routing only
 
 ## Quick Reference