Merge authoritative main into the task branch

Why: include the current integration baseline before verification.

Evidence: fetched origin/main=eef7e5e778cabcb6216f74b74213a3d7511f383b.

Impact: integrate upstream changes without rewriting task history.

Refs: task-sync

policy/architecture-baseline.json

@@ -1,4 +1,5 @@
 [
+"backend/app backend/authz",
 "backend/app backend/blobstore",
 "backend/app backend/bus",
 "backend/app backend/cardsvc",
@@ -8,11 +9,13 @@
 "backend/app backend/genui",
 "backend/app backend/hostapi",
 "backend/app backend/ingest",
+"backend/app backend/instanceguard",
 "backend/app backend/intentgate",
 "backend/app backend/intentsem",
 "backend/app backend/pgbus",
 "backend/app backend/plugins",
 "backend/app backend/profiles",
+"backend/app backend/projectcontext",
 "backend/app backend/projectscope",
 "backend/app backend/prompts",
 "backend/app backend/rag",
@@ -27,10 +30,12 @@
 "backend/app backend/surfacesvc",
 "backend/app backend/tools",
 "backend/app backend/workflow",
+"backend/authz backend/store",
 "backend/cardsvc backend/store",
 "backend/ctxasm backend/vision",
 "backend/hostapi backend/store",
 "backend/ingest backend/vision",
+"backend/instanceguard backend/store",
 "backend/pgbus backend/bus",
 "backend/pgbus backend/store",
 "backend/plugins backend/settings",
@@ -46,9 +51,11 @@
 "backend/route backend/intentgate",
 "backend/runmgr backend/bus",
 "backend/runmgr backend/cardsvc",
+"backend/runmgr backend/docgen",
 "backend/runmgr backend/ingest",
 "backend/runmgr backend/intentgate",
 "backend/runmgr backend/profiles",
+"backend/runmgr backend/projectcontext",
 "backend/runmgr backend/route",
 "backend/runmgr backend/runtime",
 "backend/runmgr backend/settings",
@@ -56,13 +63,14 @@
 "backend/runmgr backend/tools",
 "backend/runmgr backend/workflow",
 "backend/runtime backend/ctxasm",
-"backend/runtime backend/docgen",
+"backend/runtime backend/projectcontext",
 "backend/runtime backend/prompts",
 "backend/runtime backend/quality",
 "backend/runtime backend/squadadapter",
 "backend/runtime backend/wfcompile",
 "backend/runtime backend/vision",
 "backend/runtime backend/workflow",
+"backend/server backend/authz",
 "backend/server backend/cardsvc",
 "backend/server backend/cmdbus",
 "backend/server backend/execenv",
@@ -82,10 +90,13 @@
 "backend/server backend/workflow",
 "backend/settings backend/store",
 "backend/squadadapter backend/quality",
+"backend/store backend/authz",
 "backend/store backend/blobstore",
 "backend/surfacesvc backend/store",
+"backend/tools backend/docgen",
 "backend/tools backend/execenv",
 "backend/tools backend/quality",
+"backend/wfcompile backend/projectcontext",
 "backend/wfcompile backend/tools",
 "backend/wfcompile backend/workflow",
 "frontend/app frontend/components",