feat: prepare CASAN paid PoC release package

packaging/levels.json

@@ -50,15 +50,37 @@
       "level": 3,
       "package_names": ["casan-platform", "casan-control-panel"],
       "status": "preview",
-      "summary": "Optional productization UI: Control Panel, Dashboard, Evidence/Attack/Run-History viewers, read-only Ask CASAN, Gitea webhook. AgentOps dashboard and Plan-13 Control Panel Track 1/2/3 plus FinOps/SLO management, Command Center baseline, and local-prod TLS/OIDC smoke exist today; the rest is preview/planned.",
+      "summary": "Optional productization UI: packaged Control Panel, AgentOps dashboard, Run History, governed settings, approvals, kill-switch, FinOps/SLO, Command Center, Governed Chat MVP and Evidence Pack Viewer. Attack Battery Viewer, Gitea webhook publishing and managed production rollout remain preview work.",
       "target_users": ["teams wanting UI/dashboard/visibility", "demo/training/productization"],
       "extends": "devkit",
-      "implemented_components": ["agentops-dashboard (packages/casan-harness/scripts/bash/dashboard-server.py + dashboard-serve.sh)", "Ops Console monitoring + governed settings + approval inbox + kill-switch + FinOps/SLO + Command Center + local-prod TLS/OIDC smoke (packages/casan-control-panel — NestJS API + React UI, Plan-13 Track 1/2/3/4 local-prod + §8.6)"],
-      "pending_components": ["managed production deploy with enterprise IdP/cert/host (Plan-13 Track 4 / Plan-07 T2)", "evidence-pack-viewer", "attack-battery-viewer", "gitea-webhook-integration", "read-only Ask CASAN (Plan-18 MVP-0)"],
+      "implemented_components": ["agentops-dashboard", "control-panel monitoring and run history", "governed settings and rollback", "RBAC and approval inbox", "kill-switch", "FinOps/SLO", "Command Center", "Governed Chat read-only/analysis/operator/codegen MVP", "agent/skill/model selection", "Evidence Pack Viewer", "local-prod TLS/OIDC smoke"],
+      "pending_components": ["managed production deploy with enterprise IdP/cert/host", "attack-battery-viewer", "gitea-webhook evidence publishing"],
       "includes": [
         "packages/casan-platform",
+        "packages/casan-control-panel",
         "packages/casan-harness/scripts/bash/dashboard-server.py",
-        "packages/casan-harness/scripts/bash/dashboard-serve.sh"
+        "packages/casan-harness/scripts/bash/dashboard-serve.sh",
+        "package.json",
+        "package-lock.json",
+        "Dockerfile.control-panel-api",
+        "Dockerfile.control-panel-ui",
+        "docker-compose.control-panel.yml",
+        "docker-compose.control-panel.local.yml",
+        "nginx/control-panel.conf",
+        "packaging/control-panel-oauth2-proxy.env.example",
+        "infra/local-prod/idp",
+        "infra/production",
+        "docs/security/CONTROL_PANEL_AUTH_HARDENING.md",
+        "docs/packaging/EDITION_FEATURE_LIMITATION_MATRIX.md",
+        "docs/jp-poc",
+        "docs/commercial/LICENSE_AND_IP_DECISION.md",
+        "docs/commercial/THIRD_PARTY_SOFTWARE.json",
+        "docs/technical_architecture.md",
+        "apps/okr/domain",
+        "apps/okr/frontend",
+        "apps/okr/backend",
+        "apps/service-desk",
+        "scripts/smoke-release-artifact.sh"
       ],
       "artifact": "casan-platform-preview-v{VERSION}.tar.gz",
       "docker_image": "casan-platform:{VERSION} (preview)"
@@ -67,7 +89,7 @@
       "level": 4,
       "package_names": ["casan-enterprise", "casan-governed-console"],
       "status": "future",
-      "summary": "Governed Chat Console, Prompt Mode Router, Model Provider Management, Operator/Codegen modes, Agent/Skill Registry, RBAC, approval workflow, tenant isolation, KMS/WORM, policy versioning.",
+      "summary": "Enterprise promotion layer for the already implemented governed console building blocks. The edition remains future until managed deployment, lifecycle operations, legal/compliance deliverables and enterprise support controls are verified.",
       "target_users": ["enterprise/internal platform", "multi-project governance", "official governed AI-SDLC console"],
       "extends": "platform",
       "implemented_components": [
@@ -76,9 +98,12 @@
         "approval workflow (approval-verify.sh/approval-sign.sh/approval-jwt-mint.py)",
         "KMS (vault-kms.sh)",
         "WORM (worm-ledger.py)",
-        "kill-switch (kill-switch.sh)"
+        "kill-switch (kill-switch.sh)",
+        "Governed Chat/Prompt Router/Operator/Codegen MVP (packaged in Platform preview)",
+        "Agent/Skill/Model selection MVP (packaged in Platform preview)",
+        "Evidence Pack Viewer (packaged in Platform preview)"
       ],
-      "pending_components": ["governed-chat-console", "prompt-mode-router", "model-provider-management", "operator-mode", "codegen-mode", "agent-skill-registry", "policy-versioning-ui"],
+      "pending_components": ["managed enterprise deployment evidence", "policy-versioning UI", "HA/DR/SLA", "external security assessment", "commercial support and compliance pack"],
       "includes": ["packages/casan-enterprise"],
       "artifact": "casan-enterprise-preview-v{VERSION}.tar.gz",
       "docker_image": "casan-enterprise:{VERSION} (future)"