WARDEN-WP-0004: repo hygiene and hub sync

Update SCOPE and README to reflect the shipped warden CLI, fill agent
rules for stack/architecture/boundary, archive finished workplans
0001–0003, and register WP-0004 in State Hub.

.claude/rules/stack-and-commands.md

@@ -1,19 +1,35 @@
 ## Stack
 
-<!-- TODO: Fill in language, frameworks, and key dependencies -->
-- **Language:**
-- **Key deps:**
+- **Language:** Python 3.11+
+- **CLI:** Typer + Rich
+- **Key deps:** pyyaml, httpx (Vault/OpenBao API); ssh-keygen subprocess (local CA)
+- **Packaging:** hatchling + uv
 
 ## Dev Commands
 
 ```bash
-# TODO: Fill in the standard commands for this repo
-
 # Install dependencies
+uv sync
 
-# Run tests
+# Run unit tests (integration tests excluded by default)
+uv run pytest
 
-# Lint / type check
+# Run real ssh-keygen integration tests
+uv run pytest -m integration
 
-# Build / package (if applicable)
+# Lint
+uv run ruff check .
+
+# Install CLI locally
+uv tool install .
+
+# CLI help
+warden --help
+ops-ssh-wrapper --help   # after install
 ```
+
+Config and state paths:
+
+- `~/.config/warden/warden.yaml` — backend selection (`local` | `vault`)
+- `~/.config/warden/inventory.yaml` — actor registry
+- `~/.local/state/warden/` — certs, keys, `signatures.log`