feat(WP-0008): reassessment, task-status canon, archive hygiene

- Post-WP-0007 reassessment and SCOPE/README updates
- AGENTS.md + workplan-convention task status canon migration
- examples/warden.production.example.yaml for production OpenBao
- Archive WP-0004 through WP-0007 to workplans/archived/260617-*
- WP-0008 T1/T3/T4 done; T2/T5 wait on operator/flex-auth

AGENTS.md

@@ -63,8 +63,9 @@ Omit `workstream_id` / `task_id` when not applicable.
 ```bash
 curl -s -X PATCH "http://127.0.0.1:8000/tasks/<task_id>" \
   -H "Content-Type: application/json" \
-  -d '{"status": "in_progress"}'
-# values: todo | in_progress | done | blocked
+  -d '{"status": "progress"}'
+# canonical values: wait | todo | progress | done | cancel
+# migration aliases (accepted during transition): blocked→wait, in_progress→progress
 ```
 
 ### Flag a task for human review
@@ -146,7 +147,7 @@ derived health labels, not frontmatter statuses.
 
 ` ` `task
 id: OPS-WP-NNNN-T01
-status: todo | in_progress | done | blocked
+status: wait | todo | progress | done | cancel
 priority: high | medium | low
 state_hub_task_id: "<uuid>"         # written by fix-consistency — do not edit
 ` ` `
@@ -154,7 +155,9 @@ state_hub_task_id: "<uuid>"         # written by fix-consistency — do not edit
 Task description text.
 ```
 
-Status progression: `todo` → `in_progress` → `done` (or `blocked`)
+Task status progression: `todo` → `progress` → `done` (or `wait` when blocked on
+external dependency, `cancel` when dropped). Workplan/workstream frontmatter
+statuses are separate and still include `blocked`.
 
 To create a new workplan:
 1. Write the file following the format above