feat(plan-01): Phase 4c — hard cutoff, remove .specify compat facade

Repoint every remaining literal `.specify/...` / `docs/input` reference to the real
package/domain location and delete all compat symlinks. The harness now runs purely via
packages/casan-harness/... with no .specify facade; .specify holds ONLY runtime state
(logs/, agentops/alerts.log, level5/central-governance).

Refs fixed (Phase 0.5 only caught `$VAR/.specify/` — these were bare/`__file__`/literal):
- secrets-scan.sh: scan-target excludes -> packages/casan-harness/... (+ apps/okr/domain/corpus)
- loop_common.py: loop-policy.yaml -> harness config (package-relative)
- evidence-pack-build.py: judge-gate test + traceability-matrix.py -> harness/sibling
- phase10-traceability: REQ -> $CASAN_DOMAIN_ROOT/input
- run-casan-pipeline.mjs: model-fallback/drift-detect/rollback-manager -> HARNESS_BASH,
  golden -> GOLDEN_PLAN (apps/okr/domain), with .specify/logs state kept
- casan-step.mjs: requirement fallback restored to docs/input for hermetic sandboxes
- descriptive config (tool-registry/harness-package/drift-policy/hallucination/risk-registry/
  loop-policy.schema + docstrings) repointed for accuracy
- policy-bundle.yaml: 8 policy paths -> packages/casan-harness/...; manifest regenerated +
  re-signed (POLICY_HASHES_VALID files=8, POLICY_SIGNATURE_VALID)

Removed 22 .specify code/config symlinks + docs/input symlink.
Full gate via packages path, NO facade: PASS=64 FAIL=0 SKIP=3.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

AINative_OKR_CASAN5/packages/casan-harness/level5/drift-policy.yaml

@@ -1,7 +1,7 @@
 version: 1.0
 description: CASAN Level 5 drift detection policy
 
-golden_dir: .specify/level5/golden-runs
+golden_dir: apps/okr/domain/golden-runs
 evidence_dir: docs/output/casan/level5-evidence
 
 thresholds:

AINative_OKR_CASAN5/packages/casan-harness/level5/harness-package.json

@@ -17,8 +17,8 @@
     "python": ">=3.9"
   },
   "entrypoints": {
-    "wrapper": ".specify/scripts/bash/casan-harness.sh",
-    "test": ".specify/tests/run-casan4-harness-tests.sh",
+    "wrapper": "packages/casan-harness/scripts/bash/casan-harness.sh",
+    "test": "packages/casan-harness/tests/run-casan4-harness-tests.sh",
     "dashboard": "docs/output/casan/agentops-dashboard.html"
   }
 }

AINative_OKR_CASAN5/packages/casan-harness/level5/tool-registry.yaml

@@ -18,7 +18,7 @@ tools:
     allowed_agents: "boss,implement-agent"
     rollback:
       strategy: git_patch_reverse
-      script: .specify/scripts/bash/rollback-manager.sh
+      script: packages/casan-harness/scripts/bash/rollback-manager.sh
 
   - id: migration
     owner: database-owner
@@ -29,7 +29,7 @@ tools:
     allowed_agents: "boss,implement-agent"
     rollback:
       strategy: migration_down_or_restore
-      script: .specify/scripts/bash/rollback-manager.sh
+      script: packages/casan-harness/scripts/bash/rollback-manager.sh
 
   - id: deploy
     owner: release-manager
@@ -41,7 +41,7 @@ tools:
     allowed_agents: "boss,release-manager"
     rollback:
       strategy: previous_release
-      script: .specify/scripts/bash/rollback-manager.sh
+      script: packages/casan-harness/scripts/bash/rollback-manager.sh
 
   - id: external_api
     owner: platform-team
@@ -52,7 +52,7 @@ tools:
     allowed_agents: "boss,implement-agent"
     rollback:
       strategy: compensating_request
-      script: .specify/scripts/bash/rollback-manager.sh
+      script: packages/casan-harness/scripts/bash/rollback-manager.sh
 
   - id: db_write
     owner: database-owner
@@ -63,7 +63,7 @@ tools:
     allowed_agents: "boss,implement-agent"
     rollback:
       strategy: restore_from_backup
-      script: .specify/scripts/powershell/rollback-manager.ps1
+      script: packages/casan-harness/scripts/powershell/rollback-manager.ps1
 
   - id: write_file
     owner: engineering
@@ -74,7 +74,7 @@ tools:
     allowed_agents: "boss,implement-agent,design-agent"
     rollback:
       strategy: delete_or_restore
-      script: .specify/scripts/bash/rollback-manager.sh
+      script: packages/casan-harness/scripts/bash/rollback-manager.sh
 
 level5_gate:
   required_fields: