feat(federation): register config-atlas and reserve surface.* namespace

Add config-atlas as a federation source (capability index) and to the local
repo roster. Document surface.* as a distinct id namespace owned by
config-atlas (typed sibling of capability.*, not federated here) under a new
"Id namespace ownership" section. Raw URL currently 303 (required:false), same
publish block as state-hub/feature-control. Recompose federated.yaml.

Supports config-atlas ATLAS-WP-0002-T05.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

registry/indexes/federated.yaml

@@ -1,7 +1,7 @@
 # Composed federated capability index. Regenerate with:
 # reuse-surface federation compose
 version: 1
-updated: '2026-06-18'
+updated: '2026-06-26'
 domain: helix_forge
 collision_policy: warn
 sources:
@@ -37,6 +37,10 @@ sources:
   count: 0
   url: https://gitea.coulomb.social/coulomb/citation-work/raw/main/registry/indexes/capabilities.yaml
   cache: registry/federation/cache/citation-work.yaml
+- repo: config-atlas
+  count: 1
+  url: https://gitea.coulomb.social/coulomb/config-atlas/raw/main/registry/indexes/capabilities.yaml
+  cache: registry/federation/cache/config-atlas.yaml
 - repo: coordination-engine
   count: 0
   url: https://gitea.coulomb.social/coulomb/coordination-engine/raw/main/registry/indexes/capabilities.yaml
@@ -82,7 +86,7 @@ sources:
   url: https://gitea.coulomb.social/coulomb/hub-core/raw/main/registry/indexes/capabilities.yaml
   cache: registry/federation/cache/hub-core.yaml
 - repo: human-resources
-  count: 0
+  count: 1
   url: https://gitea.coulomb.social/coulomb/human-resources/raw/main/registry/indexes/capabilities.yaml
   cache: registry/federation/cache/human-resources.yaml
 - repo: identity-canon
@@ -202,7 +206,7 @@ sources:
   url: https://gitea.coulomb.social/coulomb/repo-scoping/raw/main/registry/indexes/capabilities.yaml
   cache: registry/federation/cache/repo-scoping.yaml
 - repo: repo-seed
-  count: 0
+  count: 1
   url: https://gitea.coulomb.social/coulomb/repo-seed/raw/main/registry/indexes/capabilities.yaml
   cache: registry/federation/cache/repo-seed.yaml
 - repo: reuse-surface
@@ -355,6 +359,25 @@ capabilities:
   source_repo: feature-control
   source_url: https://gitea.coulomb.social/coulomb/feature-control/raw/main/registry/indexes/capabilities.yaml
   source_index: registry/federation/cache/feature-control.yaml
+- id: capability.hr.workflow-catalog
+  name: HR Workflow Catalog
+  summary: Markdown-first registry of HR planning workflows with an iterative assessment
+    loop tied to INTENT phases.
+  vector: D3 / A1 / C1 / R0
+  domain: consumer
+  status: draft
+  owner: human-resources
+  path: registry/capabilities/capability.hr.workflow-catalog.md
+  tags:
+  - hr
+  - workflows
+  - assessment
+  - planning
+  consumption_modes:
+  - informational
+  source_repo: human-resources
+  source_url: https://gitea.coulomb.social/coulomb/human-resources/raw/main/registry/indexes/capabilities.yaml
+  source_index: registry/federation/cache/human-resources.yaml
 - id: capability.identity.subject-resolution
   name: Identity Subject Resolution
   summary: Resolve who or what is acting by mapping principals, accounts, actors,
@@ -391,6 +414,48 @@ capabilities:
   source_repo: identity-canon
   source_url: https://gitea.coulomb.social/coulomb/identity-canon/raw/main/registry/indexes/capabilities.yaml
   source_index: registry/federation/cache/identity-canon.yaml
+- id: capability.infotech.config-surface-atlas
+  name: Configuration Surface Atlas
+  summary: "Read-first, cross-kind map and evidence layer for configuration surfaces\
+    \ \u2014 what configures a system, who owns it, its scope, and where the source\
+    \ of truth lives."
+  vector: D5 / A0 / C2 / R2
+  domain: infotech
+  status: draft
+  owner: config-atlas
+  path: registry/capabilities/capability.infotech.config-surface-atlas.md
+  tags:
+  - configuration
+  - registry
+  - control-plane
+  - effective-config
+  - evidence
+  consumption_modes:
+  - informational
+  - source module
+  source_repo: config-atlas
+  source_url: https://gitea.coulomb.social/coulomb/config-atlas/raw/main/registry/indexes/capabilities.yaml
+  source_index: registry/federation/cache/config-atlas.yaml
+- id: capability.infotech.repo-template
+  name: Coulomb Repository Template
+  summary: Bootstrap new git repositories with agent instructions, registry scaffold,
+    and State Hub onboarding conventions.
+  vector: D3 / A3 / C2 / R2
+  domain: infotech
+  status: draft
+  owner: repo-seed
+  path: registry/capabilities/capability.infotech.repo-template.md
+  tags:
+  - template
+  - bootstrap
+  - state-hub
+  - onboarding
+  consumption_modes:
+  - git clone
+  - informational
+  source_repo: repo-seed
+  source_url: https://gitea.coulomb.social/coulomb/repo-seed/raw/main/registry/indexes/capabilities.yaml
+  source_index: registry/federation/cache/repo-seed.yaml
 - id: capability.registry.register
   name: Capability Registration
   summary: Register a new capability so it becomes visible for planning and implementation