feat(goals): add domain/repo goal tracking and update_workstream MCP tool

- Migration c5d6e7f8a9b0: domain_goals and repo_goals tables, repo_goal_id FK on workstreams
- DomainGoal: one active per domain (partial unique index), status active/archived/superseded
- RepoGoal: integer priority, status active/paused/completed/archived, optional domain_goal_id link
- WorkstreamUpdate schema and router extended with repo_goal_id and repo_goal_id filter
- 6 new MCP goal tools: create_domain_goal, get_domain_goals, activate_domain_goal, create_repo_goal, get_repo_goals, update_repo_goal
- update_workstream MCP tool: patch any subset of workstream fields (title, description, owner, due_date, repo_goal_id, status)
- get_domain_summary extended with goal_guidance (needs_workplan, alignment_warnings) signals
- Dashboard goals.md page and docs/goals.md reference page
- CLAUDE.md template updated to act on goal_guidance signals at session start
- CUST-WP-0010 workplan for this feature

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

scripts/project_claude_md.template

@@ -36,8 +36,19 @@ Output a concise brief covering:
    task counts, any blocking decisions
 2. **Pending tasks for this repo** — from local `workplans/` files (Step 2)
    plus any state hub tasks with `[repo:{REPO_SLUG}]` in their title
-3. **Suggested next action** — the highest-priority open item across both sources
-4. **SBOM status** — is `last_sbom_at` set for this repo? If not, note it as a gap
+3. **Goal guidance** — if the summary contains a `goal_guidance` key, act on it:
+   - **`needs_workplan`** entries: for each active repo goal with no linked workstream,
+     surface it as the top suggested action — *"Repo goal '{title}' has no workplan yet.
+     Suggest: create workplans/{REPO_SLUG}-WP-NNNN-<slug>.md and register a workstream
+     with repo_goal_id='{goal_id}'"*. Treat this as higher priority than continuing
+     existing work unless Bernd says otherwise.
+   - **`alignment_warnings`** entries: if active workstreams exist but are not linked
+     to the current repo goal, name the most recently active one and note:
+     *"Current work on '{recent_workstream_title}' may not be aligned with the active
+     goal '{active_goal_title}'. Continue unless you hear otherwise — but flag it."*
+4. **Suggested next action** — the highest-priority open item across all sources,
+   with goal alignment taken into account
+5. **SBOM status** — is `last_sbom_at` set for this repo? If not, note it as a gap
 
 If there are no workstreams at all: follow the First Session Protocol below.