feat(federation): register config-atlas and reserve surface.* namespace

Add config-atlas as a federation source (capability index) and to the local
repo roster. Document surface.* as a distinct id namespace owned by
config-atlas (typed sibling of capability.*, not federated here) under a new
"Id namespace ownership" section. Raw URL currently 303 (required:false), same
publish block as state-hub/feature-control. Recompose federated.yaml.

Supports config-atlas ATLAS-WP-0002-T05.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

registry/federation/local-repo-roster.yaml

@@ -1,17 +1,17 @@
 version: 1
-updated: '2026-06-16'
+updated: '2026-06-26'
 workstation_root: /home/worsch
 definition: All git repositories one level under the workstation home directory (e.g.
   /home/worsch/<slug> with a .git directory). Excludes nested worktrees and non-git
   folders.
 summary:
-  total: 60
-  established: 60
+  total: 61
+  established: 61
   pending: 0
   with_reuse_surface_seed: 8
-  hub_registered: 60
+  hub_registered: 61
   publish_pass: 60
-  publish_fail: 0
+  publish_fail: 1
   publish_sweep: '2026-06-16'
 repos:
 - slug: activity-core
@@ -87,6 +87,17 @@ repos:
   hub_registered: true
   publish_check: pass
   batch: B01
+- slug: config-atlas
+  path: /home/worsch/config-atlas
+  status: established
+  capability_count: 1
+  seed_from_reuse_surface: false
+  seed_capability_ids:
+  - capability.infotech.config-surface-atlas
+  hub_registered: true
+  publish_check: fail
+  publish_note: 303 not published (same block as state-hub/feature-control)
+  batch: B02
 - slug: coordination-engine
   path: /home/worsch/coordination-engine
   status: established

registry/federation/sources.yaml

@@ -58,6 +58,18 @@ sources:
   domain: helix_forge
   cache_ttl_seconds: 86400
   auth_header: Authorization
+- repo: config-atlas
+  url: https://gitea.coulomb.social/coulomb/config-atlas/raw/main/registry/indexes/capabilities.yaml
+  enabled: true
+  required: false
+  domain: helix_forge
+  description: >-
+    Configuration Surface Atlas. Owns the `surface.*` id namespace (configuration
+    surfaces in registry/indexes/surfaces.yaml) as a typed sibling of `capability.*`;
+    only its capability index is federated here. Raw URL returns 303 until publish
+    is resolved (same block as state-hub/feature-control).
+  cache_ttl_seconds: 86400
+  auth_header: Authorization
 - repo: coordination-engine
   url: https://gitea.coulomb.social/coulomb/coordination-engine/raw/main/registry/indexes/capabilities.yaml
   enabled: true