feat(classification-spine): implement STATE-WP-0065 repo-anchored model

Replace the ad-hoc coordination-domain spine with the Repo Classification
Standard: 14 market domains, classification columns on managed_repos, and
workplans anchored by repo_id (topic_id optional).

- Add Alembic migration d8e9f0a1b2c3 with data backfill and workstream→workplan rename
- Add api/classification.py validation and register-from-classification tooling
- Expose workplan-first REST/MCP surface with legacy workstream aliases
- Add C-24 consistency rule and legacy domain frontmatter mapping
- Update dashboard repos page with category/capability/stake filters
- Update orientation docs; mark STATE-WP-0065 finished

tests/test_token_passthrough.py

@@ -25,14 +25,16 @@ async def _create_topic(client, domain_slug="td"):
     return r.json()
 
 
-async def _create_workstream(client, topic_id):
-    r = await client.post("/workstreams/", json={"topic_id": topic_id, "slug": "ws", "title": "WS"})
-    assert r.status_code == 201, r.text
-    return r.json()
+from tests.conftest import create_test_repo, create_test_workplan
 
 
-async def _create_task(client, workstream_id, title="my task"):
-    r = await client.post("/tasks/", json={"workstream_id": workstream_id, "title": title})
+async def _create_workstream(client, topic_id, domain_slug="td"):
+    repo = await create_test_repo(client, domain_slug=domain_slug, slug="td-repo")
+    return await create_test_workplan(client, repo_id=repo["id"], topic_id=topic_id, slug="ws", title="WS")
+
+
+async def _create_task(client, workplan_id, title="my task"):
+    r = await client.post("/tasks/", json={"workplan_id": workplan_id, "title": title})
     assert r.status_code == 201, r.text
     return r.json()