Repo hygiene + new workplans (RAIL-BS-WP-0008/0009)

- Add RAIL-BS-WP-0008 (activity-core WP-0016 deploy) and RAIL-BS-WP-0009
  (admin-sync smoke) from inbox asks 87952ff1 / aa8b7986
- Archive finished workplans to workplans/archived/ per ADR-001 convention;
  normalize frontmatter statuses (completed/done -> finished)
- Fill stack-and-commands.md, complete repo-boundary.md, refresh SCOPE
  Current State, add docs/operator-runbook.md for production-touching targets

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

.claude/rules/stack-and-commands.md

@@ -1,19 +1,22 @@
 ## Stack
 
-<!-- TODO: Fill in language, frameworks, and key dependencies -->
-- **Language:**
-- **Key deps:**
+- **Language:** Bash tooling (`tools/cmd/`) orchestrating kubectl/Helm over SSH
+- **Key deps:** k3s on railiance01 (COULOMBCORE), Helm, SOPS/age for secrets, State Hub REST for evidence notes
+- **Execution model:** commands run from the workstation; cluster access is `ssh railiance01` (most `tools/cmd/*` accept a `CLUSTER_HOST` override)
 
 ## Dev Commands
 
 ```bash
-# TODO: Fill in the standard commands for this repo
-
-# Install dependencies
-
-# Run tests
-
-# Lint / type check
-
-# Build / package (if applicable)
+make help                                  # list all targets
+make preflight                             # pre-migration safety gate — run before cluster work
+make smoke                                 # Kubernetes smoke tests
+make test-ha-failover                      # HA failover test (kills primary PG pod, asserts recovery)
+sudo make backup                           # age-encrypted backup: k3s state + Helm values + kubeconfig
+make restore                               # list backups + restore guide
+make verify-activity-core                  # reconcile activity-core runtime + probe evidence
+make reconcile-activity-core-llm-connect   # llm-connect reconcile + non-secret gate checks
 ```
+
+Production-touching targets (deploy/reconcile/backup) need operator approval —
+see `docs/operator-runbook.md`. There is no test suite or linter in this repo;
+validation is the preflight + smoke targets against the live cluster.