feat: add capability-driven integration adapters

[pacphi]

Summary

• Introduce capability-driven host, inference-provider, projection, observability, and binding registries.
• Make ak host / ak x host canonical while retaining deprecated ak provider aliases until their documented pre-stable removal.
• Add safe integration config migration, lifecycle/ownership contracts, normalized facts, and distinct observability identities.
• Model OpenCode as a non-routable host, OpenRouter as provider-only, and Ollama with independent Claude and Codex bindings.
• Align status, routing, dashboard, usage reporting, guidance, upgrade documentation, and ADR-0016.

Compatibility

This is an alpha migration. ak provider and ak x provider emit a deprecation warning and remain functional temporarily. Documentation states that both aliases will be removed before the stable release. Inference-provider terminology remains valid where it describes the provider axis.

Commits

Commit ID	Description / explanation	Impact
ced2980	Adds the capability-driven integration foundation: validated host, inference-provider, configuration-projection, and observability registries; provider bindings; lifecycle and ownership contracts; additive config migration; normalized facts; canonical ak host; compatibility aliases; and comprehensive tests/docs.	Establishes distinct integration axes, prevents providers from accidentally becoming routable hosts, supports one provider behind multiple hosts, and provides safe detect/plan/apply/verify/undo behavior without persisting secrets or clobbering user state.
f58a379	Defines the repository-wide ubiquitous language, bounded-context map, integration-management domain, and routing/orchestration domain; aligns Live Sessions with those terms.	Gives current and future work a canonical vocabulary for host, provider, binding, projection, evidence, provenance, routing, and ownership, reducing category drift across code, ADRs, CLI help, and UI.
ee86f98	Corrects remaining dashboard and Live Sessions host/provider conflation; preserves provider provenance through projections; separates project host/provider counts; removes synthetic providers from routing DTOs; and moves routed host models under Hosts & Routing.	Ensures the dashboard never derives inference identity from a transcript host, renders unknown providers honestly, and keeps transcript/playback routing host-qualified.
388ec47	Clarifies the acceptance boundary between ADR-0016 and ADR-0011 and marks ADR-0016 Accepted.	Records that the adapter architecture and structural Ollama bindings are complete while local-runtime observation, catalogue-backed identity, local usage pricing, and transcript fidelity remain independent Proposed work under ADR-0011.

Test plan

• pnpm run check
• Adapter registry and lifecycle conformance tests
• Integration config migration and normalized-fact tests
• CLI canonical-command and deprecation-shim tests
• Provider proving-integration and observability identity tests
• AQE security scan: zero findings
• Independent QE review; final billing-provenance finding fixed with a regression test

Closes #71