[codex] integrate governed local Ollama architect-agent

[warheart1984-ctrl]

Summary

• adds the standalone @aaes-os/architect-agent package with strict proposal validation and native Ollama transport
• implements UCR evaluation, deterministic ALA normalization, proposal safety checks, SHA-256 envelope identity, EGL-1 decision replay, and per-run receipts
• delegates the standalone AAES model provider through the architect-agent package
• documents implemented, external, and planned constitutional capabilities
• records pre-rebase and current-main baseline debt without mixing unrelated fixes into this feature

Local model behavior

• default: qwen2.5-coder:3b
• configurable: qwen2.5-coder:7b or another installed Ollama model identifier
• non-streaming JSON generation
• bounded output and request timeout
• no filesystem mutation or command execution

Verification

• packages/architect-agent: 28 tests passed
• packages/architect-agent: strict TypeScript build passed
• aaes-os: targeted compatibility adapter test passed
• live qwen2.5-coder:3b proposal generation passed
• branch whitespace scan passed
• branch credential-pattern scan passed

Disclosed baseline debt

Current origin/main has two unrelated repository-wide blockers:

• aaes-os/src/index.ts exports missing SqliteTraceStoreStub, blocking the full AAES build
• full root pytest collection stops in four modules when governance-genome boot validation raises GenomeValidationError

These are detailed in docs/baseline-debt/local-ollama-architect-agent.md. This PR does not alter those unrelated runtime surfaces.

Related release

Lawful Nova governed shell: https://github.com/warheart1984-ctrl/agentic-coding-agent/releases/tag/v0.1.0-nova-governed-shell

[warheart1984-ctrl]

Baseline purity correction pushed in e511ccf. Verification: architect-agent 28/28, AAES 27/27, affected Python modules 251/251, OTEM/adapter supplemental matrix 30/30, genome gate 199 valid. Buildkite #9 passed. GitHub Actions still execute zero steps because the account billing lock remains external; npm publication remains blocked by ENEEDAUTH. No tag or merge was created.