Merge authoritative main into the task branch

Why: include the current integration baseline before verification.

Evidence: fetched origin/main=878e0e7ceba3bb6b78c36c5113eacc846a7f017b.

Impact: integrate upstream changes without rewriting task history.

Refs: task-sync

policy/architecture-baseline.json

@@ -6,6 +6,7 @@
   "backend/app backend/hostapi",
   "backend/app backend/ingest",
   "backend/app backend/intentgate",
+  "backend/app backend/intentsem",
   "backend/app backend/pgbus",
   "backend/app backend/plugins",
   "backend/app backend/profiles",
@@ -33,10 +34,13 @@
   "backend/prompts backend/store",
   "backend/rag backend/settings",
   "backend/rag backend/store",
+  "backend/route backend/intentgate",
   "backend/runmgr backend/bus",
   "backend/runmgr backend/cardsvc",
   "backend/runmgr backend/ingest",
+  "backend/runmgr backend/intentgate",
   "backend/runmgr backend/profiles",
+  "backend/runmgr backend/route",
   "backend/runmgr backend/runtime",
   "backend/runmgr backend/settings",
   "backend/runmgr backend/store",
@@ -57,6 +61,7 @@
   "backend/server backend/profiles",
   "backend/server backend/prompts",
   "backend/server backend/ratelimit",
+  "backend/server backend/route",
   "backend/server backend/runmgr",
   "backend/server backend/settings",
   "backend/server backend/store",

scripts/lint-boundaries.sh

@@ -84,7 +84,7 @@ done
 while IFS= read -r f; do
   grep -q '"agent-intent/' "$f" || continue
   case "$f" in
-    */deps/agent-squad/adapters/intent/*|*/modules/backend/internal/intentgate/*) ;;
+    */deps/agent-squad/adapters/intent/*|*/modules/backend/internal/intentgate/*|*/modules/backend/internal/intentsem/*) ;;
     *)
       echo "boundary: $f imports agent-intent" >&2
       fail=1