tooling: adopt procoder governance (commit gate, skill integration, context) + remove committed AGENT_API_KEY from docs

.procoder/config.toml

@@ -0,0 +1,2 @@
+[git]
+default_branch_policy = "report"  # rulebook allows docs/evidence commits to main

.procoder/context.md

@@ -0,0 +1,13 @@
+# Context — anwarpy.ai
+
+## effective access
+
+The single server-side decision (launch.ts policy + doc.access + doc.status) consumed identically by the article page, public JSON route, download gate, and llms-full.
+
+## ghost-read
+
+Fetching an intended-VIP post logged out to assert what a stranger sees; the acceptance check for any access-logic change.
+
+## honest 503
+
+A dependency-down response with a fixed Arabic sentence (e.g. billing disabled, mail transport down) instead of a fake success; reference implementation: /api/notify.

.procoder/hosts.json

@@ -0,0 +1,3 @@
+[
+  "skills"
+]

.procoder/state/env.json

@@ -0,0 +1,29 @@
+{
+  "version": 1,
+  "synced_at": "2026-10-13T02:31:48Z",
+  "lockfiles": {
+    "web/package-lock.json": "b0168d824c755b061aeb7dc8bddb7faa05b7a236ccc82b196843d5752e3632d3"
+  },
+  "migrations": {
+    "web/src/migrations": {
+      "count": 14,
+      "entries": [
+        "20261002_130505_init.json",
+        "20261002_130505_init.ts",
+        "20261002_170000_add_full_name.ts",
+        "20261003_111451.json",
+        "20261003_111451.ts",
+        "20261003_133758.json",
+        "20261003_133758.ts",
+        "20261003_201454.json",
+        "20261003_201454.ts",
+        "20261009_130817.json",
+        "20261009_130817.ts",
+        "20261010_142214.json",
+        "20261010_142214.ts",
+        "index.ts"
+      ]
+    }
+  },
+  "env_keys": {}
+}