WARDEN-WP-0004: repo hygiene and hub sync

Update SCOPE and README to reflect the shipped warden CLI, fill agent
rules for stack/architecture/boundary, archive finished workplans
0001–0003, and register WP-0004 in State Hub.

SCOPE.md

@@ -73,8 +73,11 @@ backend is in use.
 
 ## Current State
 
-- Status: planned — WARDEN-WP-0001 not yet started
-- Implementation: scaffolding only (models, config, CA, inventory, scorecard, CLI stubs)
+- Status: shipped — WARDEN-WP-0001 through WARDEN-WP-0003 complete (v0.1.0)
+- Implementation: full `warden` CLI with `local` and `vault` backends, inventory,
+  scorecard, cleanup, signatures log, and `ops-ssh-wrapper`
+- Active maintenance: WARDEN-WP-0004 (repo hygiene); follow-ups tracked separately
+  for OpenBao doc alignment and capability registry publish
 
 ---
 
@@ -129,4 +132,4 @@ keywords: [ssh, certificate, ca, credential, warden, ops-warden, pki, vault]
 - Config files: `~/.config/warden/warden.yaml`, `~/.config/warden/inventory.yaml`
 - State: `~/.local/state/warden/` (certs, generated keypairs)
 - Entry point: `warden --help`
-- Workplan: `workplans/WARDEN-WP-0001-initial-implementation.md`
+- Workplans: `workplans/` (active); `workplans/archived/` (finished)