feat(register): modular @-import CLAUDE.md structure (ops-bridge pattern)

Replaces the monolithic project_claude_md.template with a directory of
7 focused rule files in scripts/project_rules/. register_project.sh now
generates .claude/rules/*.md + a thin CLAUDE.md index of @-imports,
matching the pattern established in ops-bridge.

Template files:
  claude-md.template          — 9-line @-import index
  repo-identity.template      — purpose, domain, slug, topic ID (machine-gen)
  session-protocol.template   — orient/inbox/workplans/brief/close (machine-gen)
  first-session.template      — bootstrap flow; delete once past FSP
  workplan-convention.template— prefix, location; delegates to global CLAUDE.md
  stack-and-commands.template — language/deps/commands (stub, manual)
  architecture.template       — design overview (stub, manual)
  repo-boundary.template      — what this repo does NOT own (stub, manual)

register_project.sh changes:
  - Generates .claude/rules/ from templates with variable substitution
  - Writes thin CLAUDE.md if none exists; appends suggestion comment if one does
  - Step 7: auto-registers this machine's local path via POST /repos/{slug}/paths/
  - project_claude_md.template deprecated to a redirect notice

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

scripts/project_rules/architecture.template

@@ -0,0 +1,8 @@
+## Architecture
+
+<!-- TODO: Describe the key design decisions and component structure.
+     Key modules, data flows, external integrations, state machines, etc. -->
+
+## Quick Reference
+
+`~/the-custodian/state-hub/mcp_server/TOOLS.md` — MCP tool reference

scripts/project_rules/claude-md.template

@@ -0,0 +1,9 @@
+# {PROJECT_NAME} — Claude Code Instructions
+
+@.claude/rules/repo-identity.md
+@.claude/rules/session-protocol.md
+@.claude/rules/first-session.md
+@.claude/rules/workplan-convention.md
+@.claude/rules/stack-and-commands.md
+@.claude/rules/architecture.md
+@.claude/rules/repo-boundary.md

scripts/project_rules/first-session.template

@@ -0,0 +1,38 @@
+## First Session Protocol
+
+Triggered when `get_domain_summary("{DOMAIN}")` shows **no workstreams**.
+The project is registered but work has not yet been structured.
+
+**Step 1 — Read, don't write**
+- `~/the-custodian/canon/projects/{DOMAIN}/project_charter_v0.1.md` — purpose, scope
+- `~/the-custodian/canon/projects/{DOMAIN}/roadmap_v0.1.md` — planned phases
+- Scan repo root: README, directory structure, existing code or docs
+
+**Step 2 — Survey in-progress work**
+Look for TODOs, open branches, half-finished files. Note done vs. started but incomplete.
+
+**Step 3 — Propose workstreams to Bernd**
+Propose 1–3 workstreams — each a coherent strand, weeks to months, anchored to a
+roadmap phase. **Wait for approval before creating.**
+
+**Step 4 — Create workplan file first, then DB record (ADR-001)**
+```
+workplans/{REPO_SLUG}-WP-NNNN-<slug>.md   ← write this first
+```
+Then register in the hub:
+```
+create_workstream(topic_id="{TOPIC_ID}", title="...", owner="...", description="...")
+create_task(workstream_id="<id>", title="...", priority="high|medium|low")
+```
+
+**Step 5 — Record the setup**
+```
+add_progress_event(
+    summary="First session: structured {DOMAIN} into N workstreams, M tasks",
+    event_type="milestone",
+    topic_id="{TOPIC_ID}",
+    detail={"workstreams": [...], "tasks_created": M}
+)
+```
+
+<!-- Delete or archive this file once past first session -->

scripts/project_rules/repo-boundary.template

@@ -0,0 +1,8 @@
+## Repo boundary
+
+This repo owns **{PROJECT_NAME}** only. It does not own:
+
+<!-- TODO: List what belongs in adjacent repos, e.g.:
+- SSH key management → railiance-infra/
+- State hub code     → the-custodian/state-hub/
+-->

scripts/project_rules/repo-identity.template

@@ -0,0 +1,5 @@
+**Purpose:** {PROJECT_DESCRIPTION}
+
+**Domain:** {DOMAIN}
+**Repo slug:** {REPO_SLUG}
+**Topic ID:** {TOPIC_ID}

scripts/project_rules/session-protocol.template

@@ -0,0 +1,48 @@
+## Session Protocol
+
+State Hub: http://127.0.0.1:8000
+
+**Step 1 — Orient**
+```
+get_domain_summary("{DOMAIN}")
+```
+If offline: `cd ~/the-custodian/state-hub && make api`
+
+**Step 2 — Check inbox**
+```
+get_messages(to_agent="{REPO_SLUG}", unread_only=True)
+```
+Mark read with `mark_message_read(message_id)`. Reply or act on coordination
+requests before proceeding.
+
+**Step 3 — Scan workplans**
+```bash
+ls workplans/
+```
+For each file with `status: active`, note pending `todo`/`in_progress` tasks.
+
+**Step 4 — Present brief**
+
+1. **Active workstreams** for `{DOMAIN}` — title, task counts, blocking decisions
+2. **Pending tasks** from `workplans/` + any `[repo:{REPO_SLUG}]` hub tasks
+3. **Goal guidance** — if `goal_guidance` in summary:
+   - `needs_workplan`: surface as top action — *"Repo goal '{title}' has no workplan yet"*
+   - `alignment_warnings`: flag if active work is not aligned with current goal
+4. **Suggested next action** — highest-priority open item
+5. **SBOM status** — flag if `last_sbom_at` is unset for this repo
+
+If no workstreams: follow First Session Protocol (`first-session.md`).
+
+**During work:** `record_decision()` · `add_progress_event()` · `resolve_decision()`
+
+> State Hub is a *read model*. Bootstrap tools (`create_workstream`, `create_task`)
+> are First Session Protocol only. Work structure belongs in repo files (ADR-001).
+
+**Session close:**
+```
+add_progress_event(summary="...", topic_id="{TOPIC_ID}", workstream_id="<uuid>")
+```
+If workplan files were modified:
+```bash
+cd ~/the-custodian/state-hub && make fix-consistency REPO={REPO_SLUG}
+```

scripts/project_rules/stack-and-commands.template

@@ -0,0 +1,19 @@
+## Stack
+
+<!-- TODO: Fill in language, frameworks, and key dependencies -->
+- **Language:**
+- **Key deps:**
+
+## Dev Commands
+
+```bash
+# TODO: Fill in the standard commands for this repo
+
+# Install dependencies
+
+# Run tests
+
+# Lint / type check
+
+# Build / package (if applicable)
+```

scripts/project_rules/workplan-convention.template

@@ -0,0 +1,12 @@
+## Workplan Convention (ADR-001)
+
+File location: `workplans/{REPO_SLUG}-WP-NNNN-<slug>.md`
+ID prefix: `{WP_PREFIX}`
+
+Work items originate as files in this repo **before** being registered in the hub.
+
+Ecosystem todos from other agents arrive as `[repo:{REPO_SLUG}]` hub tasks —
+visible at session start. Pick one up by creating the workplan file, then registering
+the workstream.
+
+<!-- Ralph Loop rules and HEUREKA sequence: ~/.claude/CLAUDE.md — do not duplicate here -->