feat(devkit): enforce governed prompt adoption

bin/casan

@@ -49,6 +49,8 @@ Commands:
   reuse                                Verify multi-project harness reuse (registry)
   project validate [--manifest path]   Validate a project manifest and quality profile
   project init <scaffold args...>      Create an idempotent NestJS/React project shell
+  prompt verify                       Verify the adopted prompt-enforcement contract
+  prompt trace <trace-id>             Verify that a prompt trace is H1-H7 certified
   pipeline [--manifest path]           Run the manifest-driven SRS→test pipeline
   dashboard [port]                     Serve the AgentOps dashboard (default 8787)
   version                              Print version
@@ -85,6 +87,16 @@ case "$cmd" in
         exec python3 "$DEVKIT/project-scaffold.py" "$@" ;;
       *) echo "casan: usage: casan project <validate|init>" >&2; exit 64 ;;
     esac ;;
+  prompt)
+    sub="${1:-help}"; shift || true
+    case "$sub" in
+      verify) exec bash "$BASH_DIR/prompt-enforcement-verify.sh" --root "$CASAN_APP_ROOT" "$@" ;;
+      trace)
+        trace_id="${1:-}"; [[ -n "$trace_id" ]] || { echo "casan: usage: casan prompt trace <trace-id>" >&2; exit 64; }
+        shift
+        exec bash "$BASH_DIR/prompt-enforcement-verify.sh" --root "$CASAN_APP_ROOT" --trace-id "$trace_id" "$@" ;;
+      *) echo "casan: usage: casan prompt <verify|trace>" >&2; exit 64 ;;
+    esac ;;
   pipeline)
     RUNNER="$CASAN_APP_ROOT/scripts/run-casan-pipeline.mjs"
     [[ -f "$RUNNER" ]] || { echo "casan: pipeline runner is not installed" >&2; exit 1; }