Merge authoritative main into the task branch

Why: include the current integration baseline before verification.

Evidence: fetched origin/main=878e0e7ceba3bb6b78c36c5113eacc846a7f017b.

Impact: integrate upstream changes without rewriting task history.

Refs: task-sync

policy/architecture-baseline.json

@@ -6,6 +6,7 @@
   "backend/app backend/hostapi",
   "backend/app backend/ingest",
   "backend/app backend/intentgate",
+  "backend/app backend/intentsem",
   "backend/app backend/pgbus",
   "backend/app backend/plugins",
   "backend/app backend/profiles",
@@ -33,10 +34,13 @@
   "backend/prompts backend/store",
   "backend/rag backend/settings",
   "backend/rag backend/store",
+  "backend/route backend/intentgate",
   "backend/runmgr backend/bus",
   "backend/runmgr backend/cardsvc",
   "backend/runmgr backend/ingest",
+  "backend/runmgr backend/intentgate",
   "backend/runmgr backend/profiles",
+  "backend/runmgr backend/route",
   "backend/runmgr backend/runtime",
   "backend/runmgr backend/settings",
   "backend/runmgr backend/store",
@@ -57,6 +61,7 @@
   "backend/server backend/profiles",
   "backend/server backend/prompts",
   "backend/server backend/ratelimit",
+  "backend/server backend/route",
   "backend/server backend/runmgr",
   "backend/server backend/settings",
   "backend/server backend/store",