feat(plan-01): Phase 1 — relocate harness code to packages/casan-harness (symlink facade)

Physically move the pure-code subtrees out of .specify into the package, leaving
compat symlinks at the old .specify/<dir> paths so every existing reference (internal
CASAN_HARNESS_ROOT + external CI/docker/mjs) keeps resolving. Runtime state stays put.

Moved (git mv): scripts/ tests/ security/ templates/ config/ governance/ memory/
  .specify/<dir>  ->  packages/casan-harness/<dir>   (+ .specify/<dir> symlink)
Stays in .specify (state/governance/domain, handled later): logs/ agentops/ level5/
  init-options.json traceability-map.json

Python `.resolve()` self-location followed the compat symlink into packages and lost
the app root; generate-casan-demo-context.py, generate-agentops-dashboard.py and
dashboard-server.py now walk UP for the `.specify` state marker instead of a fixed
parent depth (fixes "missing trace files" in run-casan4).

Full gate: PASS=64 FAIL=0 SKIP=3 (CASAN_CI_STEP_TIMEOUT_SEC=1200 — track-a ~450s runs
close to the 600s default and can tip over under load; this is timing variance, not a
regression — it passed cleanly with headroom). Runtime log/audit artifacts kept unstaged.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

AINative_OKR_CASAN5/.specify/config

@@ -0,0 +1 @@
+../packages/casan-harness/config

AINative_OKR_CASAN5/.specify/governance

@@ -0,0 +1 @@
+../packages/casan-harness/governance

AINative_OKR_CASAN5/.specify/memory

@@ -0,0 +1 @@
+../packages/casan-harness/memory

AINative_OKR_CASAN5/.specify/scripts

@@ -0,0 +1 @@
+../packages/casan-harness/scripts

AINative_OKR_CASAN5/.specify/security

@@ -0,0 +1 @@
+../packages/casan-harness/security

AINative_OKR_CASAN5/.specify/templates

@@ -0,0 +1 @@
+../packages/casan-harness/templates

AINative_OKR_CASAN5/.specify/tests

@@ -0,0 +1 @@
+../packages/casan-harness/tests

AINative_OKR_CASAN5/packages/casan-harness/scripts/bash/dashboard-server.py

@@ -20,7 +20,17 @@ import sys
 import time
 from http.server import BaseHTTPRequestHandler, HTTPServer
 
-ROOT = pathlib.Path(__file__).resolve().parents[3]
+def _app_root(start):
+    # Plan-01: `.resolve()` follows the compat symlink into packages/casan-harness;
+    # dashboards + runtime logs live at the app's `.specify`, so walk UP for it.
+    d = pathlib.Path(start).resolve()
+    for p in (d, *d.parents):
+        if (p / ".specify").is_dir():
+            return p
+    return d.parents[3]
+
+
+ROOT = _app_root(__file__)
 PORT = int(sys.argv[1]) if len(sys.argv) > 1 else 8787
 DASH = pathlib.Path(os.environ.get(
     "CASAN_DASHBOARD_HTML", ROOT / "docs" / "output" / "casan" / "central-agentops-dashboard.html"))